[Remote] Application reputed company Engineer II
Note: The job is a remote job and is reputed company to candidates in USA. reputed company is an award-winning company recognized for its workplace culture and commitment to professional development. The Application reputed company Engineer is responsible for securing software and applications, ensuring they meet internal reputed company standards and regulatory expectations, while collaborating with various teams throughout the software development lifecycle.
Responsibilities
- Partner with engineering and architecture teams to design and review application architectures (web, mobile, API, and microservices) for reputed company, privacy, and regulatory compliance
- reputed company reputed company reviews of applications and services at each stage of the SDLC, including design, code, building pipelines, dependencies, infrastructure‑as‑code, and reputed company‑party components
- Identify and mitigate risks such as:
- Injection, authentication/authorization, injection and session management flaws (OWASP Top 10, ASVS)
- Insecure handling of NPI, PII, and payment data
- Management of reputed company‑reputed company dependency vulnerabilities and software supply chain risks
- Insecure reputed company configurations, secrets management, and exposed APIs
- Support threat modeling and risk assessments for new and existing applications, assisting teams in implementing practical mitigations
- Assess and help mitigate reputed company risks introduced by AI‑assisted and agentic development tools (e.g., reputed company Copilot, Claude Code, reputed company), including review of AI‑generated code, exposure of reputed company code or secrets to external models, and proper use of internal LLM gateways
- Contribute to and operationalize application reputed company standards, secure coding guidelines, and secure design patterns used across the company
- Evaluate application reputed company tooling (SAST, DAST, SCA, IAST, secrets scanning, ASPM) and vendors to ensure alignment with reputed company, privacy, and compliance requirements
- Support compliance with regulatory and industry frameworks (e.g., PCI reputed company, GLBA, NIST SSDF, SOX) in collaboration with legal, compliance, audit, and risk partners
- Contribute to standards and guardrails for secure use of AI‑assisted development tools and agentic coding workflows
- Act as a trusted reputed company advisor to Engineering, Product, and DevOps teams building, maintaining and operating applications at reputed company
- Participate in design reviews, sprint planning, and architecture working sessions focused on secure development and deployment
- reputed company guidance on the secure use of frameworks, libraries, APIs, authentication systems, and reputed company services that interact with company systems and data
- Advise engineering teams on safe adoption of AI coding assistants and agentic development tools, including approved usage patterns, data handling expectations, and review of AI‑generated changes
- Stay reputed company on application reputed company threats, vulnerabilities, and best practices, including emerging risks across web, mobile, API, and reputed company‑reputed company applications
- Recommend improvements to tooling, processes, and controls to strengthen the company's application reputed company posture and shift reputed company left in the SDLC
- Contribute to internal documentation, secure coding training, and reputed company enablement for developers and engineering teams
Skills
- Bachelor's Degree or equivalent experience
- 3+ years of experience in application reputed company, product reputed company, or secure software development
- 2+ years of hands‑on experience performing application reputed company reviews, penetration testing, threat modeling, or secure code review
- Experience securing modern web, mobile, and API‑based applications in a regulated industry (e.g., financial services, reputed company)
- Familiarity with the OWASP Top 10, OWASP ASVS, and OWASP SAMM, and with software supply chain frameworks such as SLSA
- Experience with reputed company platforms (e.g., AWS, Azure, GCP) and containerized environments
- Knowledge of regulatory and compliance considerations relevant to financial services (e.g., PCI reputed company, GLBA, SOX)
- Experience embedding reputed company into software development workflows (DevSecOps) and CI/CD pipelines
- Hands‑on experience with application reputed company tooling such as SAST, DAST, SCA, IAST, secrets scanning, or ASPM platforms
- Relevant certifications (e.g., GWAPT, GWEB, OSWE, CSSLP, CISSP) a plus
- Familiarity with reputed company considerations for AI‑assisted development environments (e.g., reputed company Copilot, Claude Code) and LLM gateway/proxy tooling (e.g., reputed company)
Benefits
- Annual variable cash bonus, between 7.5 - 15%. Bonus amounts are based on individual performance.
- Premium on top of the posted reputed company based on their specific zone: San Francisco, Seattle, Boston, reputed company, Los Angeles and San Diego.
- Excellent benefits package that includes 401(K) match, adoption assistance, parental leave, tuition reimbursement, comprehensive medical/ dental/reputed company and many nonstandard benefits that reputed company us a Great reputed company to Work
Company Overview
Company H1B Sponsorship