> Markdown version of [/jobs/ext/1758953-senior-application-security-engineer](https://www.wearedevelopers.com/jobs/ext/1758953-senior-application-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Senior Application Security Engineer - **Company:** Unity Technologies - **Location:** United States (Remote available) - **Experience:** Expert - **Salary:** $160,300.0 - **Contract:** Permanent contract - **Skills:** Application Programming Interfaces (APIs), Artificial Intelligence, Amazon Web Services, Software System Penetration Testing, Microsoft Azure, Cloud Computing Security, Code Review, Information Systems Security Architecture Professional, Open Web Application Security, Cloud Services, Secure Coding, Software Vulnerability Management, Large Language Models, Software Security - **Published:** July 31, 2026 - **Apply:** https://dejobs.org/x/x/956676B84AA44BBA8B913652BD05D99A/job/ ## About the Role * Experience in application security, with a track record on complex, large-scale systems. * Strong command of secure coding and common vulnerability classes (OWASP Top 10 and beyond) * Hands-on secure development experience across several languages. * Practical penetration testing, security assessment, and vulnerability management experience with standard tooling. * Experience with Cloud security (GCP, AWS, or Azure). * Working knowledge of secure architecture patterns. * Clear technical communication for both engineers and non-technical partners across regions. Preferred Qualifications * Experience in the technology, gaming or Ad tech industry Base Salary Range: We determine the base salary range for this role based on your primary work location ## Description We are seeking a Senior Application Security Engineer with profound expertise in application security. In this role, you will execute fundamental AppSec tasks, including threat modeling, secure design reviews, code evaluation, and vulnerability management, leveraging both manual methods and advanced AI tooling. You will also help secure the AI systems Unity itself is building, including agentic tools and AI-assisted development workflows. You will work directly with engineering teams across the US and EMEA. What you will do * Lead threat modeling, secure design reviews, and penetration testing for Unity products and services, from the engine and editor to cloud services, APIs, and internal platforms. * Perform deep code review and manual testing on high-risk systems, using AI-assisted review processes and covering areas automated tooling cannot fully reach. * Build and operate security automation. Use and extend AI-assisted tooling for continuous code review, finding triage, and automated penetration testing, and step in where human judgment is required. * Secure Unity's AI and agentic systems. Assess AI-native products, LLM integrations, and agent workflows for the risks specific to them. * Partner with engineering teams to drive remediation, turning recurring findings into guardrails, secure defaults, and paved paths. * Investigate and respond to application security incidents, including root cause analysis and durable corrective action. * Contribute to Unity's secure development lifecycle and to compliance work., This position requires the incumbent to have a sufficient knowledge of English to have professional verbal and written exchanges in this language since the performance of the duties related to this position requires frequent and regular communication with colleagues and partners located worldwide and whose common language is English. This posting is intended to fill an existing vacancy, and we are committed to providing applicants with updates throughout the hiring process in accordance with applicable law. Headhunters and recruitment agencies may not submit resumes/CVs through this website or directly to managers. Unity does not accept unsolicited headhunter and agency resumes. Unity will not pay fees to any third-party agency or company that does not have a signed agreement with Unity. ## Related Videos - [Are Code Reviews Worth It? Insights from 16 Years of Review Data](https://www.wearedevelopers.com/videos/1135-are-code-reviews-worth-it-insights-from-16-years-of-review-data) - [How to Cause (or Prevent) a Massive Data Breach- Secure Coding and IDOR](https://www.wearedevelopers.com/videos/39-how-to-cause-or-prevent-a-massive-data-breach-secure-coding-and-idor) - [Leverage Cloud Computing Benefits with Serverless Multi-Cloud ML ](https://www.wearedevelopers.com/videos/78-leverage-cloud-computing-benefits-with-serverless-multi-cloud-ml) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Software Security 101: Secure Coding Basics](https://www.wearedevelopers.com/videos/220-software-security-101-secure-coding-basics) - [How GitHub secures open source](https://www.wearedevelopers.com/videos/1450-how-github-secures-open-source) ## Related Articles - [The 12 Best Jobs for Software Engineers](https://www.wearedevelopers.com/magazine/401-the-12-best-jobs-for-software-engineers) - [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries) - [Software Engineer Salary London](https://www.wearedevelopers.com/magazine/252-software-engineer-salary-london) - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers) - [Best Countries for Software Engineers](https://www.wearedevelopers.com/magazine/267-best-countries-for-software-engineers) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated)