Application Security Engineer

📋 Description

• Build and run the AppSec program: define standards and SLAs.
• Embed security into the SDLC: integrate checks in CI/CD.
• Security testing at scale: tune SAST/DAST/SCA across pipelines.
• Threat modeling and design reviews to identify risks early.
• Secure code reviews: coach teams on secure patterns.
• Vulnerability management: end-to-end lifecycle and root cause analysis.

🎯 Requirements

• 7+ years of experience in software engineering and/or AppSec with ownership.
• Strong understanding of modern web app security and design principles.
• Experience building security into CI/CD and developer workflows (SAST, DAST, SCA).
• Hands-on experience with Node/Next.js, C#/.NET, Python, and PHP.
• Cloud and platform know-how: AWS primary, some GCP; Kubernetes/EKS and ECS/Fargate.
• Familiarity with compliance-driven environments (SOC 2, HIPAA and/or PCI-DSS).

🎁 Benefits

• Hybrid position with in-office days in Playa Vista, CA.
• Unlimited PTO plus comprehensive health benefits.
• 401(k) company match fully vested on day 1.
• Onsite amenities including outdoor patio, cabanas, firepits, and grills.
• Monthly team outings, catered lunches, daily food trucks.
• Career growth – promotion from within.