Senior Application Security Engineer

Job Summary: We are seeking a Senior Application Security Engineer with strong hands-on programming skills in Java, C++, or Python and practical experience in application security, vulnerability analysis, and secure software development. The ideal candidate will combine advanced coding and debugging capabilities with security engineering expertise to identify vulnerabilities, validate security fixes, review automated code remediation, and strengthen the security of large-scale software systems. Key Responsibilities Develop security tools, testing utilities, vulnerability reproduction scripts, and automated validation frameworks using Java, C++, or Python. Analyze application architecture, trust boundaries, data flows, attack surfaces, and security weaknesses across distributed systems and microservices. Investigate security scanner findings, reproduce vulnerabilities, develop Proofs of Concept (PoCs), and distinguish genuine vulnerabilities from false positives. Perform detailed source code reviews to identify security flaws, insecure coding practices, potential exploits, and software regressions. Review, test, and validate security patches, including AI-generated and automated code fixes. Develop test harnesses and execute unit, regression, and security tests to verify remediation effectiveness. Apply threat modeling methodologies to identify architectural risks and recommend secure design and implementation practices. Evaluate vulnerabilities using CVE, CWE, OWASP Top 10, severity classifications, and remediation SLAs. Collaborate with software engineers, architects, and code owners to implement security fixes and support production deployment. Track vulnerabilities throughout their lifecycle and contribute to continuous improvements in secure software development. Required Skills & Qualifications 8+ years of experience in software engineering, security software development, application security, or security engineering. Strong hands-on programming and debugging skills in at least one of Java, C++, or Python. Experience with multiple languages is preferred. Extensive experience with software development, code analysis, troubleshooting, and resolving complex technical issues. Strong understanding of application security, secure coding standards, vulnerability identification, and remediation techniques. Experience reproducing security vulnerabilities and validating fixes through coding, testing, and debugging. Proficiency in source code reviews, unit testing, regression testing, and identifying security-related code defects. Knowledge of threat modeling frameworks such as STRIDE and PASTA. Understanding of architectural trust boundaries, attack surfaces, data flows, and threat analysis. Familiarity with CVE, CWE, OWASP Top 10, vulnerability severity assessment, and security remediation SLAs. Experience building security test harnesses, test environments, or PoCs for vulnerability validation. Ability to assess automated code changes and identify security issues, functional regressions, and implementation weaknesses. Preferred Skills Experience securing large-scale distributed systems, search platforms, or microservices. Familiarity with SAST/DAST tools, automated vulnerability scanning, and security remediation platforms. Experience with fuzz testing, sandbox execution, and automated security testing frameworks. Experience reviewing AI-generated code and validating automated security patches. Knowledge of differential testing, automated patch validation, and secure CI/CD pipelines. Understanding of the Secure Software Development Lifecycle (SSDLC).