Senior Application Security Engineer

Lead application security integration within product development lifecycle for identity management products used by customers in their own datacenters.

Own threat modeling, secure coding standards, code reviews, static/dynamic analysis tuning, and AI-assisted development security decisions across .NET and Java codebases.

Manage end-to-end product vulnerability response including intake, triage, coordinated disclosure, CVE handling, and generating security evidence for customers and certifications.

6+ years in software engineering or security, with at least 3 years specifically in application or product security.

Hands-on coding proficiency in C#/.NET and working knowledge of Java production codebases.

Recent (within 6 months) practical experience with AI-assisted development or AI-enabled security tooling and ability to integrate it into review pipelines.

Experience securing products deployed and operated by customers with understanding of release and vulnerability disclosure processes.

Experienced in threat modeling and security integration early in engineering design phases, able to influence architecture decisions.

Capable of balancing breadth across multiple product lines and depth in secure coding practices to prioritize workload effectively.

Skilled in working directly with senior engineers and product leaders to establish defensible risk acceptance and systemic security controls rather than just filing findings.