Lead Application Security Engineer

Own the deterministic risk intelligence layer that prioritizes vulnerability fixes based on actual risk impact.

Correlate and deduplicate diverse security scanner findings into unique exposures enriched with business and threat context.

Implement and maintain a reproducible, explainable policy-as-code scoring and action prioritization engine with evidence-backed remediation guidance.

7+ years in application security, vulnerability management, threat exposure management, or security engineering with enterprise-scale risk-based prioritization experience.

Proficient in production Python coding, SQL, policy logic implementation, and data analysis for scoring and risk modeling.

In-depth knowledge of application security domains including SAST, SCA, DAST, secrets, containers, infrastructure as code, and software supply chain risk.

Work Experience Required: 7+ years. Notice Period: Not explicitly mentioned in the JD.

Experienced in designing and calibrating deterministic risk models prioritizing vulnerabilities by real exploitability and business impact.

Skilled at explaining complex security prioritization outcomes concisely to non-experts and influencing developers and service owners effectively.

Possesses deep threat intelligence and attack path analysis expertise spanning network, cloud, identity, and software dependencies to assess risk accurately.