Loading...
LeadFull-timeJavaScriptPythonJavaRustAWSKubernetesMicroservicesCI/CDGoAI
Salary Range
$153,000 - $207,000 /year
This salary is estimated based on similar roles. The actual salary may vary.
About the Role
We are looking for an Application Security Engineer to join AlphaSense and play a critical role in securing our cloud-based SaaS products. You will partner with engineering and product teams to embed security best practices into our SDLC, enhance automation across CI/CD, and ensure our customers' data and insights remain protected.
Key Responsibilities
- →Lead application security initiatives across all SaaS products and microservices.
- →Define and champion strategic security initiatives across the company.
- →Conduct threat modeling, architecture reviews, and secure code assessments for both backend and frontend systems.
- →Implement and manage security automation in CI/CD, integrating SAST, DAST, SCA, and container image scanning tools.
- →Collaborate with engineering teams to triage, prioritize, and remediate vulnerabilities across applications and containerized workloads.
- →Drive AppSec awareness and training, developing secure coding practices and guidelines.
- →Evaluate and deploy container security controls, ensuring images and orchestrators follow best practices.
- →Support bug bounty and vulnerability disclosure programs and coordinate penetration testing.
- →Stay ahead of emerging application and container threats, and recommend preventive controls aligned with OWASP and CIS benchmarks.
Requirements
- ✓7+ years of experience in Application or Product Security, preferably in a SaaS or cloud-native environment
- ✓Strong understanding of web app and API security, microservices, and containerized architectures
- ✓Experience integrating security tooling into modern CI/CD workflows
- ✓Proficiency with SAST, DAST, IaC scanning, and container security platforms
- ✓Skilled in secure coding and code review for at least one major language (Python, Java, Go, JavaScript)
- ✓Familiarity with AWS security, Kubernetes security, and DevSecOps best practices.
