> Markdown version of [/jobs/ext/1848347-senior-application-security-platform-engineer](https://www.wearedevelopers.com/jobs/ext/1848347-senior-application-security-platform-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Senior Application Security Platform Engineer

- **Company:** Rockstar Games
- **Location:** New York, NY, United States
- **Experience:** Expert
- **Salary:** $121,400.0 - $166,700.0
- **Contract:** Permanent contract
- **Skills:** Microsoft Windows, C Sharp (Programming Language), C++ (Programming Language), Static Program Analysis, Continuous Integration, Linux, Github, Information Systems Security Architecture Professional, Python (Programming Language), Open Web Application Security, Web Application Security, Software Engineering, Policy as Code, Diagnostic Tools, Pulumi, Delivery Pipeline, Software Security, Kubernetes, Teamcity, Terraform, Static Application Security Testing
- **Published:** July 3, 2026
- **Apply:** https://www.jobmonkeyjobs.com/career/27816188/Senior-Application-Security-Platform-Engineer-Any-New-York-1214

## About the Role

* 5+ years of experience working in a professional, academic or research environment identifying and remediating security bugs/flaws, assisted by automated pipelines.
 * Knowledge of common web security vulnerabilities (e.g., OWASP Top 10), client-side security landscape, attack techniques and remediation tactics/strategies.
 * Experience implementing and tuning SAST, SCA, IaC and Secrets Detection tools effectively, especially fine-tuning static analysis detections with custom rule engines (CodeQL, Semgrep).
 * Expertise deploying within CI/CD platforms (TeamCity or GitHub Actions) and container orchestration frameworks (e.g. Kubernetes), including establishing appropriate security controls in them
 * Experience in establishing monitoring and observability techniques of build pipelines and their outputs.
 * Experience with both Windows and Linux operating systems.
 * Proficiency in C#, Python., * Hands-on experience building or deploying security agents using frameworks likeLangChain or LangGraph to automate complex multi-step security tasks.
 * Familiarity with using Infrastructure as Code languages (Terraform, Pulumi) to deploy secure architecture.
 * Experience enforcing security guardrails with Policy as Code (e.g. OPA) engines to existing and new CI/CD workflows.
 * Understanding of C++ and associated compilers.
 * Experience in establishing CI/CD controls for cloud-native pipelines and runtime environments.

## Description

* Architect and support secure software development lifecycle operations embedded in software development pipelines.
 * Provide technical security guidance to developers, team leads, and producers.
 * Drive remediation efforts behind internally and publicly identified vulnerabilities.


## Related Videos

- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Why segmenting your infrastructure into tiers makes your infrastructure design better](https://www.wearedevelopers.com/videos/1960-why-segmenting-your-infrastructure-into-tiers-makes-your-infrastructure-design-better)
- [Innovating Developer Tools with AI: Insights from GitHub Next](https://www.wearedevelopers.com/videos/1268-innovating-developer-tools-with-ai-insights-from-github-next)
- [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker)
- [Real-World Security for Busy Developers](https://www.wearedevelopers.com/videos/1545-real-world-security-for-busy-developers)
- [Unleashing Potential Across Teams: The Power of Infrastructure as Code](https://www.wearedevelopers.com/videos/930-unleashing-potential-across-teams-the-power-of-infrastructure-as-code)

## Related Articles

- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Dev Digest 120 - Apple and peers](https://www.wearedevelopers.com/magazine/455-dev-digest-120-apple-and-peers)
- [Dev Digest 138 - Are you secure about this?](https://www.wearedevelopers.com/magazine/486-dev-digest-138-are-you-secure-about-this)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Dev Digest 105 - Security First](https://www.wearedevelopers.com/magazine/393-dev-digest-105-security-first)