Senior Application Security Engineer
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Senior Application Security Engineer securing Windows applications for Malwarebytes’ cybersecurity, privacy, and identity protection products. Managing AppSec tooling, vulnerability triage, penetration testing, and bug bounty operations.
Responsibilities:
- Automate security processes and tooling within the CI/CD pipeline
- Integrate SAST, DAST, and SCA tools to prevent classes of security issues
- Manage collaboration with external firms on security-focused code reviews and penetration tests
- Triage security findings and consult teams on severity and resolution
- Support product and development teams on application security
- Conduct threat modeling and design reviews
- Administer and support the ongoing bug bounty program and security tools
- Assist the triage team and collaborate with external researchers and the platform vendor
- Work with development teams to validate reported vulnerabilities and verify fixes mitigate associated risks
- Lead efforts to promote security best practices and foster a secure development culture
- Focus primarily on Windows application security, contributing to macOS, iOS, and Android security as needed
Requirements:
- Substantial experience securing Windows applications
- Proficiency managing a bug bounty program
- Hands-on experience with SAST, DAST, and SCA tooling
- Ability to use GitHub and manage relevant GitHub Actions and GitHub Advanced Security features
- Experience in code review and security analysis of desktop applications
- Advanced knowledge of securing Windows desktop applications
- Software development skills in C, C++, C#, or Java
- Experience securing cloud services, desktop, and mobile applications
- Excellent written and verbal communication skills
- Ability to adapt quickly in a growing organization and solve problems collaboratively across development teams
- Willingness to learn new security technologies as business needs evolve
- Ability to work independently in high-risk environments with minimal supervision
- Red teaming experience (nice to have)
- CISSP, CEH, or GIAC certification (nice to have)
- Reverse engineering (nice to have)
- Hands-on experience in AWS and managing infrastructure with Terraform (nice to have)
- Advanced knowledge of macOS, iOS, and Android security (nice to have)
- Thorough knowledge of digital forensics methodology (nice to have)
- Strong background in security architecture, system administration, and networking (nice to have)
Benefits:
- Comprehensive medical, dental, and vision insurance coverage
- Employee Referral Bonus Program
- Wellness programs
- Comprehensive Time Off policy
- An opportunity to do something great for yourself and the world!
Similar Jobs
Sales & Application Engineer
Sales and Application Engineer supporting ANDRITZ paper-industry customers with technical solutions. Managing Northern Germany accounts, product trials, troubleshooting, and commercial sales activities.
Battery Sales Application Engineer
Battery Sales Application Engineer translating customer needs into lithium-ion cell and pack solutions. Supporting modeling, testing, BMS development, manufacturing partners, and product launches across the EU.
Application Engineer
Edifecs Application Engineer administering and optimizing EDI transaction platforms for SAIC’s defense, intelligence, and civilian technology missions. Supporting AWS environments, integrations, troubleshooting, and compliant transaction processing.
Quantum Application Engineer
Quantum Application Engineer helping Classiq’s enterprise customers design and deploy quantum applications. Leading onboarding, technical projects, and customer-driven product insights across EMEA.
Application Support Engineer
Application Support Engineer investigating Zact’s GCP-hosted commercial card and payments platform. Handling Zendesk tickets, cloud logs, MySQL queries, and regulated bank-client incidents.
Field Application Engineer, IP&E
Field Application Engineer supporting customer designs and supplier relationships for Arrow Electronics, a global electronic-components distributor. Driving technical demand creation across Poland.
Field Application Engineer
Field Application Engineer installing, troubleshooting, and training customers on Cepheid GeneXpert molecular diagnostic systems. Covering South Iberia through remote, field-based customer support and travel.
Field Application Engineer
Field Application Engineer installing, training customers on, and repairing Formlabs 3D printing systems. Serving the DACH region through extensive on-site travel and technical support.
Lead, Field Application Engineer - Europe
Lead Molex’s Field Application Engineer team supporting customer design and deployment of aerospace and defense connector solutions. Bridge customer needs with sales, product management, and engineering.
Staff Application Security Engineer
Staff Application Security Engineer securing Engine’s AI-native intelligent travel platform. Owning SIEM, vulnerability management, application security reviews, and incident response.
Senior Application Engineer
Senior Application Engineer building Ascender Pro and internal applications at CIQ, which delivers enterprise Linux and infrastructure solutions. Developing Python, React, TypeScript, and Go features across the full stack.
Director, Applications Engineering
Applications Engineering Director leading technical qualification and customer solutions for VulcanForms’ additive manufacturing operations. Building the applications engineering team and supporting complex industrial sales.
Senior Applications Engineer
Senior Applications Engineer assessing customer feasibility and shaping technical proposals for VulcanForms’ industrial additive manufacturing. Translating product requirements into actionable documentation for engineering and sales teams.
Senior Application Engineer
Senior Application Engineer serving as GE Vernova’s technical interface for BWRX-300 nuclear projects. Evaluating sites, adapting designs, and guiding Polish customers through pre-contract delivery planning.
Senior Application Engineer
Senior Application Engineer serving as GE Vernova’s technical interface for BWRX-300 nuclear projects in Poland and Europe. Evaluating sites, adapting designs, and guiding pre-contract customer delivery planning.
DELMIA Application Engineer
DELMIA Applications Engineer demonstrating CATIA V5 and DELMIA machining software for manufacturers. Supporting pre-sales, training, troubleshooting, and customer-facing technical events.
Application Engineer – Personal Safety Division
Application Engineer supporting 3M’s Personal Safety portfolio across New Zealand. Conducting workplace assessments, technical evaluations, training, troubleshooting, and product commercialization.
Technical Application Engineer – Grid Automation
Technical Application Engineer leading technical bids and customer solutions for GE Vernova’s grid automation portfolio. Supporting Digital Control Systems, cybersecurity, and substation automation across DACH.
Application Security Engineer
Application Security Engineer embedding security testing and vulnerability remediation into CivicPlus software development. Protecting digital products used by local governments and residents.
Senior Application Support Engineer
Application support engineer supporting First Advantage clients and first-line Customer Support. Troubleshooting incidents, managing knowledge, and improving service processes and SLAs.