Staff Application Security Engineer
About the role
The organization operates within the media and entertainment industry, creating and distributing content across film, television, and streaming platforms. Additionally, it manages global theme parks and consumer experiences. The company addresses challenges in delivering diverse entertainment content and experiences to broad audiences through multiple brands and platforms, including premium streaming services and major film and television studios, with operations on a global scale.
The Staff Application Security Engineer will develop and enhance application security capabilities vital to secure software development within the organization. This role translates application security strategies into practical solutions and integrates security into developer workflows to improve software security posture, impacting the organization's ability to deliver secure digital products and services.
Responsibilities
- Design and build application security tools, automations, and integrations supporting secure development.
- Implement secure-by-default development patterns and engineering workflows.
- Develop scalable security solutions covering source code, dependencies, containers, cloud-native apps, CI/CD pipelines, and software supply chains.
- Collaborate with Cloud Security, Platform Engineering, and Software Engineering teams.
- Enhance vulnerability management processes including prioritization, remediation, and reporting.
- Create security patterns and guardrails for AI-assisted development tools and agentic workflows.
- Build integrations across security platforms, developer tools, and reporting systems.
- Provide technical leadership and mentorship in application security engineering.
Requirements
- Minimum 8 years experience in Application Security, Security Engineering, DevSecOps, Software Engineering, or related fields.
- Expertise in secure software development, vulnerability management, and software supply chain security.
- Experience building security automations, integrations, APIs, and developer tools.
- Proficiency in software engineering and scripting, particularly Python or similar languages.
- Hands-on experience with AppSec technologies such as SAST, SCA, secrets detection, container security, CI/CD security, and vulnerability management.
- Ability to solve complex technical problems and promote adoption of security practices.
- Familiarity with AI-assisted development and related security considerations.