Staff Application Security Engineer

Responsibilities

• Own the configuration, tuning, and management of our SIEM solution. You will diagnose unusual threats through sophisticated analysis and develop the alerts needed to respond to security incidents across multiple layers.
• Perform architecture reviews, code reviews, and infrastructure configuration reviews. You will conduct light penetration testing on web and mobile apps, identifying root causes of vulnerabilities and resolving them using creative problem-solving.
• Maintain and optimize a vulnerability management CI/CD pipeline within our container/application delivery infrastructure. You will adapt proven methods to align security goals with business objectives, even when guidance is light.
• Partner with development and infrastructure teams to enforce secure coding practices and remediation strategies. You will adapt your messaging across teams to reduce misalignment and move security work forward.
• Build and maintain the frameworks and tooling for enterprise security, ensuring that security guidelines are clear and actionable for the broader engineering organization.
• Play a key role in incident response and forensic investigations. You will weigh context and data thoughtfully to make smart decisions during high-pressure situations.

Requirements

• We’re looking for a specialist who is ready to take ownership of team outcomes and deliver high-quality work:
• Highly skilled in one or more programming languages (e.g., Ruby, Java, Python, C#, Node.js).
• Ability to assess complex, ambiguous situations to identify root causes and provide thoughtful input on difficult security topics.

Your Mission

As part of the Engine team, you’ll play a vital role in an environment where innovation meets collaboration. You will drive work independently, syncing regularly to ensure quality and alignment across the following areas:

Security Advocacy

Stay current on the latest threats and provide direct, clear guidance to development teams. You will help develop security training to empower your peers and improve the team’s overall security posture.

SIEM & Monitoring

Expertise in managing SIEM solutions with a focus on comprehensive, efficient alerting that reduces "noise."

Cloud & Containers

Strong knowledge of Docker and Kubernetes, with hands-on experience in automated container vulnerability management.

Security Testing

Mastery of SAST, DAST, and IAST tools, with the ability to perform manual validation testing to confirm findings.

Security Principles

Deep knowledge of the OWASP Top 10, Mitre Top 25, and secure coding practices.

Communication

A track record of earning credibility with peers through clear, direct communication and a passion for mentoring others.

Compliance & Frameworks

• Experience working with cloud security concepts and compliance frameworks such as SOC 2 and PCI.
• Applications for this role will be accepted through November 20th, 2026 until the role is filled. We encourage you to apply early, as we may begin reviewing applications before the deadline.

Compensation

Our compensation packages are based on several factors, including your experience, expertise, and location. In addition to a competitive base salary, all roles receive equity. Depending on the role, total compensation may also include an annual bonus. Your recruiter will share your complete compensation package as you move through the process.

Base Pay Range

• $182,800
• $215,000 USD
• The Engine Edge: Perks & Compensation
• We believe in rewarding great work with great benefits:

Compensation

Competitive base pay tied to role and experience, with equity for all employees. Some roles are also eligible for bonuses or commissions.

Benefits

Check out our full list at engine.com/culture

Environments for Success

Different roles have different needs in terms of the environments that drive success which is why we have a hybrid-hub model. Whether you are in one of our amazing offices or fully remote, we'll make sure you have what you need to succeed.

Perks and benefits may vary based on employment type, location, and more