Senior Security Engineer – AppSec (d/f/m)

Responsibilities

We are representing a confidential SaaS organization seeking a Senior Security Engineer - AppSec to build and scale their application security program from the ground up. This is a high-impact opportunity to shape security culture, processes, and tooling across a global engineering organization handling over 1 billion requests per month.

In this role, you will:

• Partner closely with engineering teams as a trusted security advisor, championing security-by-design principles and elevating the overall security posture
• Coordinate and execute threat modeling and advanced security testing across products and underlying infrastructure
• Lead modern vulnerability management programs using risk-based principles like EPSS, leveraging AI technologies to accelerate security testing at scale
• Design, implement, and automate security checks and guardrails (SAST, DAST, secret scanning) directly into CI/CD pipelines
• Perform deep-dive code and configuration reviews, advocating for secure coding practices that support a proactive shift-left strategy
• Secure web applications and API structures within a complex multi-tenant, multi-region cloud environment
• Drive AppSec initiatives across TypeScript and Go codebases, hardening GitHub CI/CD pipelines and Kubernetes deployments

What We're Looking For

Our client requires:

• 5+ years of dedicated Security Engineering experience, ideally within high-growth SaaS, e-commerce, or fintech environments
• Deep understanding of web and API attack vectors, with proven ability to dive into complex SaaS business logic to uncover elusive vulnerabilities
• Strong knowledge of running workloads securely in cloud environments (Kubernetes, AWS/GCP/Azure)
• Proven track record of autonomously driving security initiatives from conception to completion
• Proficiency in at least one programming language for scripting and security tool development
• Bachelor's or Master's degree in Computer Science, Cybersecurity, IT, or related technical field (or equivalent practical experience)

Preferred qualifications:

• Experience with PCI DSS compliance
• Background in Red Team or Purple Team operations and advanced penetration testing
• Hands-on experience with Terraform for infrastructure-as-code security
• Familiarity with GCP, Golang, and TypeScript

How We Work With You

Candidates apply directly through Get A Job.ai. Our talent team will conduct an initial screening to understand your background and match you with this confidential opportunity. Once aligned, we submit qualified candidates to our client for their review and interview process. Please do not attempt to contact the client directly, as all communication is managed through our recruiting team to ensure a professional and confidential process.

Pay

Compensation details will be discussed during the screening process with our recruiting team.

Equal Employment Opportunity: Get A Job.ai is committed to inclusive hiring practices. We welcome applications from candidates of all backgrounds and work to ensure equitable access to opportunities.