Principal Application Security Engineer

For our client, a leader in the Retail & Consumer Goods space, we are seeking a Principal Application Security Engineer to lead technical work focused on secure, reliable systems and risk-aware execution.

Location: Remote - US based candidates only, no visa sponsorship available

About the role

You will work across engineering, product, operations, and business stakeholders to translate complex requirements into practical technology solutions. The position offers the opportunity to influence architecture, execution quality, and the technology capabilities that enable long-term growth within a consumer-facing environment.

Responsibilities

• Lead cross-functional security projects and develop advanced security practices
• Conduct security design reviews and threat modeling for products
• Implement and manage security tools and services (DAST, SAST)
• Establish secure architecture standards and frameworks
• Identify and mitigate emerging security threats
• Oversee security assessments, penetration testing, and bug bounty programs
• Engage in security incident response activities

Qualifications

• Bachelor's degree in Computer Science/Engineering or equivalent experience
• 8+ years of security leadership in a software company
• Strong knowledge of application and infrastructure security vulnerabilities (OWASP Top 10)
• Expertise in implementing Security Development Lifecycle (SDL) in a DevOps environment
• Experience with large-scale web applications and microservices
• Familiarity with major programming languages (e.g., Python, Java,.NET)
• Exceptional skills in problem-solving and communication

Pay

$177,000 – $225,000 annually

Benefits

• Remote work flexibility
• Opportunity to lead and grow a talented security team
• Involvement in cutting-edge security initiatives
• Work with senior leaders on organization-wide security strategies
• Engagement with a rapidly growing, dynamic company culture