> Markdown version of [/jobs/ext/4616907-staff-application-security-engineer](https://www.wearedevelopers.com/jobs/ext/4616907-staff-application-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Staff Application Security Engineer

- **Company:** The Upside
- **Location:** Washington, DC, United States
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Artificial Intelligence, Amazon Web Services, Amazon S3, Software System Penetration Testing, Cyber Security, Amazon DynamoDB, Payment Systems, Github, Identity and Access Management, Python (Programming Language), Microsoft Copilot, Secure Coding, Amazon Simple Notification Service (SNS), SQL Databases, Software Vulnerability Management, Snowflake, Software Security, AWS Lambda, Information Technology, Amazon Simple Queue Service (SQS), Terraform, GPT, Static Application Security Testing
- **Published:** November 7, 2026
- **Apply:** https://www.juju.com/job/28_25197_fbffbc48a9bf02b9d4cfd11009576f1d

## About the Role

* 6+ years of application or product security inclusive of reviewing Python code
 * Experience with innovating and delivering solutions related to vulnerability management
 * Deep knowledge of AWS and Lambda security architecture and AWS Control Tower
 * Strong understanding and adoption of AI technologies
 * Bachelor's degree in Computer Science or Engineering highly preferred
 * Exceptional customer service and people skills

Tools We Use:

 * Github Suite (Advanced Security, Actions, Copilot)
 * Python
 * Terraform
 * AWS Lambda, DynamoDB, S3, SNS, SQS, IAM, VPCs
 * ChatGPT
 * Snowflake
 * SQL

## Description

You'll report into the Director, Information Security and build relationships with technology stakeholders. You'll leverage your knowledge of secure code practices and payment systems to identify and remediate application vulnerabilities. This individual contributor role will innovate for our AppSec team, increase our AppSec posture and enable our engineers to code safely.

 * Innovate with AI and deliver security solutions to mitigate application vulnerabilities
 * Run security code tests (SAST, SCA) and partner with engineers to remediate unsafe code
 * Create threat models and engage technology teams to review and document risks
 * Guide leadership on security architecture, design and best AppSec practices
 * Train and upskill engineers on safe coding and vulnerability management
 * Assist penetration testing initiatives and/or help manage bug bounties
 * Support administration of AWS Control Tower and IAM provisioning
 * Interact with the security community and keep aware of trends