Senior Application Security Engineer

Senior Application Security Engineer

Secure the applications powering next-generation AI infrastructure.

We're looking for a hands-on Senior Application Security Engineer to own the security of a large-scale cloud platform, public APIs, and AI-powered applications.

What You'll Do

• Own application security across APIs, services, and customer-facing platforms.
• Lead secure software delivery through SAST, DAST, SCA, secrets detection, and SBOMs.
• Perform threat modelling, security reviews, and architecture assessments.
• Define standards for authentication, authorisation, tenant isolation, and secrets management.
• Secure AI assistants and agentic applications against risks such as prompt injection, tool misuse, and data leakage.
• Work directly with engineering teams to automate security, reduce risk, and improve software quality.

What We're Looking For

• 7+ years in Application Security, Product Security, or Security-focused Software Engineering.
• Strong knowledge of OWASP Top 10 and OWASP API Security Top 10.
• Experience securing public cloud or multi-tenant platforms.
• Hands-on experience with SAST, DAST, SCA, secrets management, and CI/CD security.
• Strong coding skills in Python, Go, or TypeScript.
• Experience with OAuth, OIDC, JWT, RBAC, ABAC, and modern authentication patterns.
• Exposure to AI/LLM security is highly desirable.

Nice to Have

• AI agent security experience.
• SOC 2 or ISO 27001 environments.
• CSSLP, OSWE, or similar security certifications.