Sr. Security Engineer
Lucid Software · Salt Lake City, UT
About the role
Senior application security engineer on Lucid Software's IT and Security team in Salt Lake City, embedded with product and engineering as their main security partner through the development lifecycle. The engineer leads security architecture and design reviews of new features, ranks vulnerabilities by business impact, matures the secure SDLC with coding standards and developer training, builds security tooling into CI/CD, keeps AI tools and agentic workflows within acceptable risk, and leads the security champions programme.
Lucid wants five or more years in software engineering or application security at a SaaS company, white-box penetration testing, AWS and modern web framework experience, a solid grasp of OWASP and API flaws, and familiarity with LLM and MCP risks; OSCP or BSCP and bug bounty experience are pluses.