Sr Application Security Engineer

As a Senior Application Security Engineer, you will help embed security across the software development lifecycle, advance application security strategy and roadmap planning, and automate application controls within CI/CD workflows. This role also drives day-to-day scanning operations, tool administration, and audit-ready documentation while partnering closely with development teams to address findings.

Key Responsibilities

• Shape the application security roadmap through threat modeling and establish security finding quality standards aligned to the evolving threat landscape, including zero-day response expectations.
• Integrate security into CI/CD pipelines, support development of microservices and APIs, and translate security requirements into developer-friendly workflows.
• Support secure AI-assisted development and AI-enabled applications by applying AI with guardrails and human review for triage, enrichment, and remediation.
• Conduct research and proof-of-concept evaluations of security tools, benchmarking accuracy, coverage, and developer experience to maintain an effective and cost-efficient toolset.
• Serve as a trusted advisor to engineering teams by meeting them where they work, helping prioritize and fix findings, and co-designing secure workflows that support delivery.
• Run office hours to coach secure coding practices and collect developer feedback to improve tools and processes.
• Communicate technical risk in plain terms to engineers, product owners, and leadership.
• Maintain program health through application onboarding, ad hoc scanning, tool administration, SLA-based reporting, and audit-ready documentation.

Required Qualifications

• 3+ years of experience in application security, security engineering, or software engineering with a security focus.
• 3+ years of experience with AppSec tooling, including SAST, SCA, DAST/IAST, and/or secrets detection.
• 3+ years of experience with Java and/or Spring Boot, building microservices and/or REST APIs.
• 2+ years of experience integrating security tools into CI/CD pipelines.
• Experience with scripting and/or automation using Python, Bash, or similar tools.

Preferred Qualifications

• 5+ years of experience in application security, security engineering, or software engineering with a security focus.
• Working knowledge of OWASP Top 10 and secure coding practices.
• Experience providing developer enablement such as office hours, training, secure coding guidance, or champions programs.
• Demonstrated partnership with software developers to resolve security issues, including explaining risk, recommending practical fixes, and closing the loop.
• Strong written and verbal communication skills, with the ability to tailor messaging for developers, product owners, and executives.
• Experience influencing without authority, resolving competing priorities, and building consensus across teams.
• Experience collecting developer feedback and using it to improve tools, processes, and documentation.

Additional Preferred Experience

• 2+ years of experience related to penetration test findings, threat modeling, or zero-day and critical-vulnerability response.
• 2+ years of experience building or evaluating security tooling through proof-of-concept testing, including business cases.
• Experience migrating or administering security platforms.
• 2+ years of experience developing or interpreting security metrics and dashboards, presenting them to technical and non-technical stakeholders.
• Experience working in cloud-native environments (APIs, containers, IaC, CI/CD) and with software supply chain security.
• Experience in financial services or other regulated environments, including audit and governance processes.
• Experience reviewing AI-generated code and securing AI coding assistants and agent/MCP integrations.
• Experience building LLM-based security automation with guardrails, including sound judgment validating AI output and protecting sensitive data.

Technology Focus

• CI/CD pipelines
• SAST, SCA, DAST, IAST, secrets detection
• Java, Spring Boot
• Microservices, REST APIs
• Python, Bash
• AI-assisted development and AI-enabled applications
• Threat modeling

Education

University (Degree) Preferred

Work Experience

• 3+ Years Required; 5+ Years Preferred

Role and Posting Details

• Location: Dallas, TX (onsite)
• Career Level: 7IC
• Base Pay Range: USD 102,000 to 122,000 per year
• Physical Requirement: Sedentary Work
• Anticipated Posting End Date: 2026-11-10

Benefits

• Superior retirement program
• Highly competitive health, wellness, and work life offerings
• Participation in an incentive program linked to performance (including annual discretionary incentive programs, non-annual sales incentive plans, or other non-annual incentive plans)