We’re seeking an Application Security Engineer to drive our threat modeling and secure design programs. This role involves working closely with application teams, security leadership, and governance bodies to ensure security is built into every stage of system and application design.
Key Responsibilities
Conduct security risk assessments of applications with focus on code design and implementation.
Develop and manage governance processes for threat modeling and secure design programs.
Assist in drafting and maintaining threat modeling governance documentation.
Collaborate with security leadership to define strategies that close control gaps and enforce secure design practices.
Prepare reports for management on residual risk and non-compliance.
Monitor and track compliance with application owners to ensure timely implementation of security controls.
Review and validate security controls against scanning tool outputs for auditability and verification.
Support application owners in filing appropriate security standard exceptions based on threat modeling results.
Develop, maintain, and enhance secure design patterns, secure coding standards, and threat libraries.
Essential Skills
Must Have:
6–9 years of information security experience.
Solid background in threat modeling frameworks, attack vectors, and vulnerability analysis (CAPEC, ATT&CK;, STRIDE).
Experience with application security controls (Web, API, Mobile, AI).
Familiarity with security and application frameworks (NIST 800-53, CSF, OWASP ASVS).
Experience with application security design and DevSecOps practices.
Valuable to Have:
Knowledge of AI, ML, DevOps, and Cloud Security.
Security certifications (CISSP, OSCP, CISM – preferred or expected within 6 months).
Solid written and verbal communication skills.
Required Skills for Cloud with App Security Job
CAPEC
ATTCK
Stride
Web
API
Mobile
AI
NIST 800-53
CSF
OWASP ASVSExperience with Application Security design and DevSecOps
Our Hiring Process
Screening (HR Round)
Technical Round 1
Technical Round 2
Final HR Round