Senior Application Security Engineer
CLEAR · Remote - US
About the role
A senior application security engineer working remotely in the US who checks that applications and the services behind them, such as middle-tier systems and databases, are designed and built securely. The engineer tests applications throughout the development lifecycle, assesses vulnerabilities and recommends fixes, automates testing and remediation, leads AI security work such as threat modelling production LLM stacks for prompt injection and auditing third-party models and APIs, reviews B2B, vendor and outsourced solutions, works with architects on secure design, and trains developers.
It asks for four years of related experience, a software development and scripting background, SAST, DAST and SCA tooling, threat modelling, penetration and API testing, AWS security, and a certification such as CSSLP, GWAPT or OSCP.