{ "count" : 95776, "data" : [ { "id" : "6a210e7274d8ee00a0af7913", "title" : "Principal Application Security Consultant, National Security", "company" : "Mandiant", "industry" : "Consulting", "salary" : { "min" : 175000.0, "max" : 250000.0, "currency" : "CAD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market data for a Principal Application Security Consultant in Ottawa, Canada, adjusted for lead seniority and the cybersecurity industry." }, "location" : "[Ottawa, ON, Canada, [Ottawa, ON, Canada], Ottawa, null, ON, CA]", "locations" : [ "[Ottawa, ON, Canada, [Ottawa, ON, Canada], Ottawa, null, ON, CA]" ], "timestamp" : "2026-06-16T11:51:17.560", "fingerprint" : "b31d7b4d5eeba8bcc207bd5235b81f95d25fb7cfc953a7adaf5cfbdd36a93c97", "source" : "google", "language" : "en", "externalId" : "93794131418981062", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Ottawa", "state" : "Ontario", "country" : "Canada", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "45.4208777,-75.6901106" } ], "locationText" : "Ottawa, Ontario, Canada", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "remoteFriendly" : false, "summaryDescription" : "Principal Application Security Consultant, National Security at Mandiant", "postedDate" : "2026-06-16T01:50:17.615", "createdAt" : "2026-06-16T01:50:17.615", "lastUpdated" : "2026-06-16T11:51:17.560", "ingestTimestamp" : "2026-06-16T01:50:17.615", "mongoId" : "6a210e7274d8ee00a0af7913", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "150k-200k", "hasSalary" : false, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Lead", "dataQualityScore" : 0.6666667, "_score" : 1234.7496, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Cybersecurity", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2c91ac74d8ee00a0983b94", "title" : "Application and Product Security Principal", "company" : "Global Relay", "industry" : "Technology", "salary" : { "min" : 125000.0, "max" : 160000.0, "currency" : "CAD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Vancouver, British Columbia, Canada", "locations" : [ "Vancouver", "British Columbia", "Canada" ], "timestamp" : "2026-06-16T01:25:39.012", "fingerprint" : "c9372300508434aa88d58f34a0de4f2f660f282f7599478c7b005af9b56b055b", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://www.globalrelay.com/careers/jobs?gh_jid=6004855004", "externalId" : "6004855004", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Vancouver", "state" : "British Columbia", "country" : "Canada", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "49.2608724,-123.1139520" } ], "locationText" : "Vancouver, British Columbia, Canada", "employmentType" : "FULL_TIME", "experienceMinYears" : 10, "experienceMaxYears" : 99, "experienceLevel" : "Principal", "technicalSkills" : "Python, Java, Bash, PowerShell, API security", "professionalSkills" : [ "Risk assessment", "Process improvement", "Team development", "Quality assurance" ], "hardSkillsList" : [ "Application security", "Product security", "DevSecOps", "Vulnerability management", "Secure coding", "Threat modeling", "Automated security framework", "Scripting languages", "Open-source solutions", "Vulnerability scanning", "Security report analysis", "False positive analysis", "Security issue investigation", "Test case documentation", "Security test coverage", "OWASP Top 10", "Test methodologies" ], "softSkillsList" : [ "Leadership", "Mentoring" ], "hardSkills" : [ { "name" : "Application security", "level" : "intermediate" }, { "name" : "Product security", "level" : "intermediate" }, { "name" : "DevSecOps", "level" : "intermediate" }, { "name" : "Vulnerability management", "level" : "intermediate" }, { "name" : "Secure coding", "level" : "intermediate" }, { "name" : "Threat modeling", "level" : "intermediate" }, { "name" : "Automated security framework", "level" : "intermediate" }, { "name" : "Scripting languages", "level" : "intermediate" }, { "name" : "Open-source solutions", "level" : "intermediate" }, { "name" : "Vulnerability scanning", "level" : "intermediate" }, { "name" : "Security report analysis", "level" : "intermediate" }, { "name" : "False positive analysis", "level" : "intermediate" }, { "name" : "Security issue investigation", "level" : "intermediate" }, { "name" : "Test case documentation", "level" : "intermediate" }, { "name" : "Security test coverage", "level" : "intermediate" }, { "name" : "OWASP Top 10", "level" : "intermediate" }, { "name" : "Test methodologies", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" }, { "name" : "Mentoring" } ], "majorSkills" : "Application security, Product security, DevSecOps, Vulnerability management", "majorSkillsList" : [ "Application security", "Product security", "DevSecOps", "Vulnerability management" ], "coreResponsibilities" : "Lead DevSecOps areas, Integrate security practices, Input into strategy, Input into standards, Partner with engineering teams, Partner with platform teams, Partner with product teams, Embed automated controls, Embed secure design principles, Embed continuous assurance, Lead security sessions, Analyze security reports, Mitigate identified vulnerabilities, Improve processes, Develop automated security framework, Deploy automated security framework, Leverage scripting languages, Leverage open-source solutions, Embed security practices, Embed DevSecOps practices, Support CI/CD system, Integrate security tools, Prevent vulnerabilities, Shift-left security testing, Automate testing, Automate development, Provide technical expertise, Support DevSecOps tasks, Review vulnerability data, Identify security risks, Address false positives, Investigate security issues, Determine steps for reproduction, Determine scope of vulnerabilities, Provide encouragement to team members, Identify training needs, Mentor team members, Build security culture, Improve security efficacy, Oversee team member work, Create security documentation, Create developer training material, Improve test case documentation, Improve test case grouping, Act as subject matter expert, Lead selection of scanning tools, Lead deployment of scanning tools, Lead management of scanning tools, Develop competency in OWASP Top 10, Derive new test methodologies, Identify lacking security test coverage, Improve security test coverage, Provide suggestions for improvements, See improvements through to completion", "teamCollaboration" : "Partner with engineering; Partner with platform; Partner with product; Work with developers", "projectManagementSkills" : [ "Agile delivery methodology" ], "domainKnowledge" : "Application security; Product security; DevSecOps; Secure software development; Vulnerability management; CI/CD pipelines; API security; Container security; Kubernetes security; OpenShift security", "domainList" : [ "application-security", "product-security", "devsecops", "secure-software-development", "vulnerability-management", "ci-cd-pipelines", "api-security", "container-security", "kubernetes-security", "openshift-security" ], "domainSpecificKnowledge" : [ "Application security", "Product security", "DevSecOps", "Secure software development", "Vulnerability management", "CI/CD pipelines", "API security", "Container security", "Kubernetes security", "OpenShift security" ], "toolProficiency" : [ "Puppet", "Ansible", "Git", "Jenkins", "Docker", "Podman", "OpenShift", "Kubernetes" ], "communicationSkills" : "Verbal communication; Written communication", "documentationSkills" : "Security documentation; Developer training; Test case documentation", "continuousLearning" : "Skills development", "problemSolvingSkills" : "Methodical approach; Creative approach", "qualificationsBasic" : "8+ years application security experience, Expert knowledge software security, Experience with OWASP, Experience with Mitre, Experience with NIST SP800-115, Experience with SAST, Experience with DAST, Experience with SCA, Experience with Python, Experience with Java, Experience with Bash, Experience with PowerShell, Experience with Puppet, Experience with Ansible, Experience with Git repositories, Experience with Jenkins, Experience with Docker/Podman, Experience with CI/CD technologies, Experience with OpenShift/Kubernetes, Experience with API security", "remoteFriendly" : false, "workSiteFlexibility" : "Flexible", "rawDescription" : "Who we are: For over 25 years, Global Relay has set the standard in enterprise information archiving with industry-leading cloud archiving, surveillance, eDiscovery, and analytics solutions. We securely capture and preserve the communications data of the world’s most highly regulated firms, giving them greater visibility and control over their information and ensuring compliance with stringent regulations. Though we offer competitive compensation and benefits and all the other perks one would expect from an established company, we are not your typical technology company. Global Relay is a career-building company. A place for big ideas. New challenges. Groundbreaking innovation. It’s a place where you can genuinely make an impact – and be recognized for it. We believe great businesses thrive on diversity, inclusion, and the contributions of all employees. To that end, we recruit candidates from different backgrounds and foster a work environment that encourages employees to collaborate and learn from each other, completely free of barriers. Your role: The Application & Product Security Principal is responsible for leading the DevSecOps areas of application security, application vulnerability scanning and other daily security and compliance efforts. This role is positioned between software engineering, security and operations, driving the integration of robust security practices into every stage of the software development lifecycle. As a senior member of the Application & Product team you will input into strategy, standards and partner closely with engineering, platform and product teams to ensure security is built-in and aligned with business objectives. You will champion a proactive, risk-based approach to security, embedding automated controls, secure design principles and continuous assurance into the development pipelines. You will lead security sessions for development engineering teams with focus on risks, security report analysis, mitigations of identified vulnerabilities and process improvements. You will also be responsible for developing and deploying an automated security framework for robust deployment of tools and processes, leveraging scripting languages and open-source solutions. Your responsibilities: Extensive experience in Application Security, Product Security or DevSecOps roles Deep understanding of secure software development practices, including threat modeling, secure coding and vulnerability management Serve as the liaison for deployment of DevSecOps standards and input into new standards or policies Embed security and DevSecOps practices throughout the organization, within SDLC and support an automated continuous integration (CI) and continuous delivery (CD) system Work with APIs and plugins to integrate security tools into established CI/CD pipelines using agile delivery methodology Partner with developers and engineering teams to prevent vulnerabilities and ‘shift-left’ security testing in the SDLC Focus on automation to aid in efficiencies with both testing and development Provide hands-on technical expertise and support in general DevSecOps tasks Review and analyze vulnerability data to identify security risks to the organization's network, infrastructure, and applications, and effectively address false positives Investigate security issues in order to determine specific steps for reproduction and scope of vulnerabilities and risks Provide encouragement to team members, including identifying areas for additional training or skills development Mentor less experienced members of the team to help build a strong culture, improve security efficacy, and oversee team member work for quality and guideline compliance Create security documentation and developer training material Improve test case documentation and grouping Act as the senior subject matter expert for Global Relay software security testing related to the CI/CD pipeline Lead the selection, deployment, and management of appropriate scanning tools for security testing in the CI/CD pipeline Develop competency in the OWASP Top 10 and derive new test methodologies based on Global Relay applications Work with Application and Product Security Team Lead to identify areas where security test coverage is lacking, and work to improve the security test coverage Provide suggestions on improvements and see these through to completion About you: 8+ years of application security and operations experience and expert knowledge of software security Experience with at least one of each of the following: o OWASP, Mitre, NIST SP800-115 o SAST, DAST, SCA o Python, Java, Bash, PowerShell o Puppet, Ansible, Git repositories, Jenkins, Docker/Podman, CI/CD technologies o Container - OpenShift / Kubernetes o API security Working with Security, Developers, DevOps, and Engineering teams in a dynamic environment Secure development, coding, and engineering practices Experience with the following would be an asset: o AI tools / Machine learning o ISO 27000, SOC 2, GDPR and other security and privacy standards o CISM, CISSP, OSCP, or other relevant security certifications o Networking technologies, particularly with OSI layers and TCP/IP o Web-based protocols, including cookie management, encrypted traffic, TLS, HTTPS, HSTS, and webhooks o Security tools such as firewalls, IDS/IPS, anti-virus, anti-spam, and server and network device hardening o Encryption protocols and methodologies Ability to work under broad supervision with little instruction Ability to communicate effectively, in both written and verbal forms, with technical and non-technical cross-functional teams. Ability to communicate diplomatically and effectively at all levels of the organization with all classifications, including the very technical Proven competence using MS Office and other desktop applications Methodical and creative approach to problem-solving Excellent verbal and written communication skills Strong attention to detail and follow-up Compensation: Global Relay advertises the pay range for this role in compliance with British Columbia’s pay transparency laws. Individual pay rates are determined by evaluating factors such as expertise, skills, education, and professional background. The range below reflects the expected annual base salary, which is only one element of our comprehensive total rewards package designed to reflect our company pay philosophy, culture and values. We aim to foster an inspiring work environment and support employees' work-life rhythms. We provide a comprehensive extended health benefits program, including virtual healthcare and a wellness allowance. Employees also receive annual allotted vacation days, which increase based on tenure. Other benefits include: Paid sick days, maternity/parental enhancement program, bonus, and an RRSP contribution matching program. For Vancouver-based employees, we provide a subsidized meal program, courtesy of our talented in-house culinary team! British Columbia - Base salary range $125,000—$160,000 CAD What you can expect: At Global Relay, there’s no ceiling to what you can achieve. It’s the land of opportunity for the energetic, the intelligent, the driven. You’ll receive the mentoring, coaching, and support you need to reach your career goals. You’ll be part of a culture that breeds creativity and rewards perseverance and hard work. And you’ll be working alongside smart, talented individuals from diverse backgrounds, with complementary knowledge and skills. Global Relay is an equal-opportunity employer committed to diversity, equity, and inclusion. We seek to ensure reasonable adjustments, accommodations, and personal time are tailored to meet the unique needs of every individual. To learn more about our business, culture, and community involvement, visit www.globalrelay.com.", "summaryDescription" : "Application and Product Security Principal at Global Relay. Skills: Application security, Product security, DevSecOps, Vulnerability management. Lead DevSecOps areas. Integrate security practices", "postedDate" : "2026-06-14T19:12:43.198", "createdAt" : "2026-06-14T19:12:43.198", "lastUpdated" : "2026-06-16T01:25:39.012", "ingestTimestamp" : "2026-06-14T19:12:43.198", "mongoId" : "6a2c91ac74d8ee00a0983b94", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "100k-150k", "hasSalary" : false, "allSkills" : [ "Application security", "Product security", "DevSecOps", "Vulnerability management", "Secure coding", "Threat modeling", "Automated security framework", "Scripting languages", "Open-source solutions", "Vulnerability scanning", "Security report analysis", "False positive analysis", "Security issue investigation", "Test case documentation", "Security test coverage", "OWASP Top 10", "Test methodologies", "Leadership", "Mentoring", "Risk assessment", "Process improvement", "Team development", "Quality assurance", "Agile delivery methodology", "Secure software development", "CI/CD pipelines", "API security", "Container security", "Kubernetes security", "OpenShift security", "Puppet", "Ansible", "Git", "Jenkins", "Docker", "Podman", "OpenShift", "Kubernetes" ], "skillCount" : 38, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Executive", "dataQualityScore" : 1.0, "_score" : 1213.6206, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2c7c3874d8ee00a094ccb2", "title" : "Senior Software Engineer – Application & Cloud Security", "company" : "Hypori", "industry" : "Cybersecurity", "salary" : { "min" : 85000.0, "max" : 135000.0, "currency" : "EUR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Senior Software Engineer in Bulgaria, adjusted for the Cybersecurity industry and remote work." }, "location" : "Austin, Texas, United States", "locations" : [ "Austin", "Texas", "United States" ], "timestamp" : "2026-06-16T03:27:20.791", "fingerprint" : "9dd53e91f99793276eee7e65bc2a706b115d5487a46ad8906bba44c79f715ff4", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.greenhouse.io/hypori/jobs/6020650004", "externalId" : "6020650004", "industryFunction" : { }, "structuredLocations" : [ { "country" : "Bulgaria", "continent" : "eu", "workMode" : "remote" } ], "locationText" : "Bulgaria", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "remoteFriendly" : true, "workSiteFlexibility" : "Remote", "rawDescription" : "Hypori, Inc. is a high-growth cybersecurity SaaS company transforming how organizations think about secure mobility. Our virtual workspace platform enables users to access enterprise apps and data from any mobile device—with zero data on the endpoint and total personal privacy. Backed by $55M in funding from investors including UBS, AE Industrial Partners, Hale Capital Partners, and GreatPoint Ventures, Hypori is expanding into new commercial and regulated markets. Learn more at hypori.com. Overview: As a Senior Software Engineer specializing in Application Security in Hypori’s Product collaborate with engineering teams on threat models; participate in design and architecture reviews; and engage across scrum teams to surface and address application security, privacy, and compliance concerns. Be the go-to AppSec expert for software engineering, security, and compliance teams. Mentor engineers on application security principles, secure design patterns, and secure coding practices; grow security capability and awareness through thought leadership and active engagement. Develop and maintain software security patterns to enable security/compliance/privacy-by-default engineering, such as: secure coding and configuration standards, code snippets/templates for Infrastructure as Code, hardening of containerized applications, etc. Lead automation and integration of vulnerability management tooling – including SAST, DAST, and SCA tools – across artifact repositories, container registries, and other components of development and build pipelines. Perform security-focused code reviews on request, providing targeted guidance on security-sensitive components and implementation decisions. Triage vulnerability and compliance testing results for technical implications, validate their applicability, determine exposure in a system/component context, and generate user stories for remediation efforts. Contribute to technical compliance strategies and hardening across cloud infrastructure, development/QA environments, and system components (such as FIPS-validated crypto configurations and network segmentation); implement quality gates and security test suites across development and build pipelines. Actively contribute to the success of Hypori’s Security Champions program. Participate in Engineering on-call rotations to provide application security expertise during incident triage and response. Protect intellectual property, user data, and system integrity by (a) adhering to Hypori's policies and procedures for secure software development and (b) following best practices for secure product design, implementation, and deployment of development, build, test, production, and other environments.  Qualifications: Must be a US Citizen or US Permanent Resident 5+ years of hands-on software engineering experience, with a demonstrated focus on building and securing production systems. Proficient in at least one programming language. Proficient in understanding and explaining the ins and outs of software vulnerabilities across stacks, their potential impact when exploited, and how to mitigate them. Proficient in the security management of cloud infrastructure services and container-based deployments. Proficient in the management of software supply chain security aspects, including the management of software security vulnerabilities in dependencies. Proficient in secrets management practices and tooling (e.g., HashiCorp Vault, AWS Secrets Manager), including automated secrets scanning in development workflows and CI/CD pipelines. Proficient in expressing the concepts, practical application, and typical implementation of identity & access management, applied cryptography, network security, and related security domains. Proficient in API security concepts and their application, authentication and authorization patterns (OAuth 2.0, OIDC), and secure API design principles. Proficient in concisely articulating both technical risk and the trade-offs of proposed solutions to decision makers and peers. Experience with modern CI/CD pipelines, scrum-based engineering practices, and the automation, integration, and centralized management of security and compliance tooling across development lifecycles. Experience in interpreting security and compliance frameworks and standards. Experience with application security testing tools and techniques, and with demonstrating/validating the exploitability of vulnerabilities. Experience with AI/LLM-assisted tooling to automate application security tasks, and ability to advise software engineers on the security, compliance, and privacy implications of their use. Preferred Attributes: Proficient in the application of infrastructure-as-code principles and associated security paradigms. Familiarity with FedRAMP, NIST SP 800-53, or comparable government compliance frameworks. Experience working in or supporting a government or defense technology environment. Pay Range: $180,000-$195,000 (commensurate with experience and interview performance) plus a 10% bonus About Us Hypori Inc. provides a generous benefits package for full-time employees that includes medical, dental, and vision insurance, parental leave, and life and disability packages. We also invest in our employees' futures by providing a 401(k) plan with employer-matching contributions that vest starting from your first day of employment. In addition to the base compensation, Hypori also offers a performance bonus, which is primarily contingent upon company-wide performance. We are dedicated to investing in the tools and skills required to be strong, collaborative colleagues and people managers to help build and retain a strong workforce. Hypori is an Equal Employment and Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, genetic information, disability, veteran status, or any other characteristic protected by law. At Hypori, we are committed to creating and promoting an inclusive workplace that embraces differences and perspectives – making us a stronger, more successful company. In doing so, we are committed to providing reasonable accommodation to applicants with disabilities where appropriate. Applicants requiring reasonable accommodation for any part of the application or hiring process should contact people@hypori.com for assistance. #Hypori #BI-Remote #LI-Remote", "summaryDescription" : "Senior Software Engineer – Application & Cloud Security at Hypori", "postedDate" : "2026-06-14T20:06:42.302", "createdAt" : "2026-06-14T20:06:42.302", "lastUpdated" : "2026-06-16T03:27:20.791", "ingestTimestamp" : "2026-06-14T20:06:42.302", "mongoId" : "6a2c7c3874d8ee00a094ccb2", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "75k-100k", "hasSalary" : false, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 0.8888889, "_score" : 1151.0042, "daysOld" : 1, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "Cybersecurity", "llmIndustryConfidence" : 0.98 }, { "id" : "6a2c68f774d8ee00a0905732", "title" : "Application Security Engineer", "company" : "Opal Security", "industry" : "Engineering", "salary" : { "min" : 155000.0, "max" : 210000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for Application Security Engineer in San Francisco, adjusted for mid-seniority and technology industry." }, "location" : "San Francisco", "locations" : [ "San Francisco" ], "timestamp" : "2026-06-16T04:17:34.353", "fingerprint" : "a8435b07c820b5d36481804b12332ad4349a0ff3519ba32e6d6e27d1a6947f36", "source" : "ashby", "language" : "en", "applyUrl" : "https://jobs.ashbyhq.com/opal/d2beff94-0445-4a4b-af58-30ef33eea2c8/application", "externalId" : "d2beff94-0445-4a4b-af58-30ef33eea2c8", "industryFunction" : { }, "structuredLocations" : [ { "city" : "San Francisco", "state" : "California", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "37.7879363,-122.4075201" } ], "locationText" : "San Francisco, California, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 4, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "Go, TypeScript, AWS, Kubernetes, Docker, IAM, EKS, KMS, OAuth 2.0, OIDC, SAML", "professionalSkills" : [ "Threat modeling", "Design reviews", "Code reviews", "Incident response", "Cloud hardening", "Detection and response", "Security roadmap", "Secure coding", "Security architecture" ], "hardSkillsList" : [ "SAST", "DAST", "SCA", "Encryption services", "Authz enforcement", "Authn flows", "Token management", "Session management", "MFA", "SSO", "Least-privilege enforcement", "Detection rules" ], "hardSkills" : [ { "name" : "SAST", "level" : "intermediate" }, { "name" : "DAST", "level" : "intermediate" }, { "name" : "SCA", "level" : "intermediate" }, { "name" : "Encryption services", "level" : "intermediate" }, { "name" : "Authz enforcement", "level" : "intermediate" }, { "name" : "Authn flows", "level" : "intermediate" }, { "name" : "Token management", "level" : "intermediate" }, { "name" : "Session management", "level" : "intermediate" }, { "name" : "MFA", "level" : "intermediate" }, { "name" : "SSO", "level" : "intermediate" }, { "name" : "Least-privilege enforcement", "level" : "intermediate" }, { "name" : "Detection rules", "level" : "intermediate" } ], "majorSkills" : "Application security, Product security, Cloud security, Identity governance", "majorSkillsList" : [ "Application security", "Product security", "Cloud security", "Identity governance" ], "coreResponsibilities" : "Own secure SDLC end-to-end, Run app pentests, Coordinate app pentests, Drive findings to closure, Build SAST/DAST/SCA tooling, Own SAST/DAST/SCA tooling, Triage vulnerabilities, Remediate vulnerabilities, Build security-critical stuff, Maintain security-critical stuff, Own Auth0 integration, Ship production Go, Ship production TypeScript, Harden APIs, Enforce least-privilege, Close vuln classes, Create shared libraries, Investigate security incidents, Contain security incidents, Find root cause, Fix security incidents, Partner on cloud hardening, Level up detection, Level up response, Write detection rules, Improve logging, Improve alerting, Mentor engineers, Set security roadmap, Be security teammate", "teamCollaboration" : "Embedded with engineering; Partner with Infra; Work with engineers; Cross-functional initiatives", "domainKnowledge" : "Identity governance; AI era; Access management; Enterprise software; Cloud security; Application security; Product security; Auth0 integration; AWS IAM; EKS; KMS; Network segmentation; OAuth 2.0; OIDC; SAML; Containerized environments", "domainList" : [ "identity-governance", "ai-era", "access-management", "enterprise-software", "cloud-security", "application-security", "product-security", "auth0-integration", "aws-iam", "eks", "kms", "network-segmentation", "oauth-2-0", "oidc", "saml", "containerized-environments" ], "domainSpecificKnowledge" : [ "Identity governance", "AI era", "Access management", "Enterprise software", "Cloud security", "Application security", "Product security", "Auth0 integration", "AWS IAM", "EKS", "KMS", "Network segmentation", "OAuth 2.0", "OIDC", "SAML", "Containerized environments" ], "toolProficiency" : [ "CI/CD" ], "problemSolvingSkills" : "Root cause analysis", "qualificationsBasic" : "4+ years in application security, Write production code, Know auth cold, Comfortable in AWS, Comfortable in containerized environments", "qualificationsPreferred" : "Familiarity with Go, Familiarity with TypeScript, Familiarity with React, Familiarity with PostgreSQL, Familiarity with Redis, Familiarity with GraphQL, Led complex security initiatives, Run external pentests, Thrive on ownership and ambiguity", "remoteFriendly" : true, "workSiteFlexibility" : "Flexible", "rawDescription" : "About Opal Security: At Opal, we’re building modern identity governance for the AI era—intelligent access management that empowers enterprises to move fast while staying secure. Our mission is to bring clarity, control, and confidence to complex enterprise environments, helping teams govern access without slowing down innovation. The Role: Most security engineers spend their careers bolting locks onto doors that were already built. This is not that job. We're hiring an Application Security Engineer to own security across Opal's product and platform — and yes, own means what it sounds like. You'd be our dedicated security engineer, embedded directly with engineering, writing production code in Go and TypeScript, and building security into the product while it's still being designed. You’ll work closely with a team of engineers that genuinely care about getting this right, and a product that happens to be one of the most security-critical tools in enterprise software. Oh, and one more thing: Opal is a security company. We sell access control to organizations that take security seriously. That means your work isn't a cost center — it's core to what we do. This role lives on the Platform team and partners closely with Infrastructure Engineering on cloud security. It is explicitly scoped to application and product security — enterprise IT, compliance, and vendor risk management are handled separately. What You’ll Do: Secure Development Lifecycle - - Own the secure SDLC end-to-end: threat modeling, design reviews, code reviews — you set the bar - Run and coordinate app pentests (internal and external) and drive findings to closure - Build and own SAST/DAST/SCA tooling wired into CI/CD so security ships with the code - Triage and remediate vulnerabilities from every angle — bug bounty, internal scans, the works Software Security Engineering - - Build and maintain the security-critical stuff: encryption services, authz enforcement, authn flows - Own the Auth0 ↔ Opal integration — tokens, sessions, MFA, SSO (SAML, OIDC, OAuth 2.0) - Ship production Go and TypeScript to harden APIs, enforce least-privilege, and close vuln classes for good - Create shared libraries that make the secure path the easy path for every product engineer Incident Response & Cloud Security - - Be first on the scene for security incidents: investigate, contain, find the root cause, fix it - Partner with Infra on cloud hardening — AWS IAM, EKS, KMS, network segmentation - Level up detection and response by writing detection rules and improving logging and alerting Security Culture - - Mentor engineers on secure coding, common vuln patterns, and security architecture — you make the org smarter - Help set the security roadmap by grounding it in real product risk - Be the security teammate engineers want to work with — a collaborator, not a bottleneck You Might Be a Fit If You: - Have 4+ years in application security or software security engineering - Actually write production code — findings reports are the floor, not the ceiling - Know auth cold: OAuth 2.0, OIDC, SAML, session management, token lifecycle - Are comfortable in AWS and containerized environments (Kubernetes, Docker) - Bonus points for familiarity with our stack: Go, TypeScript, React, PostgreSQL, Redis, GraphQL - Have led complex, cross-functional security initiatives from kickoff to completion - Have run or participated in external pentests and seen findings through remediation - Thrive on ownership and ambiguity — you'd rather write the playbook than wait for one", "summaryDescription" : "Application Security Engineer at Opal Security. Skills: Application security, Product security, Cloud security, Identity governance. Own secure SDLC end-to-end. Run app pentests", "createdAt" : "2026-06-14T19:19:47.190", "lastUpdated" : "2026-06-16T04:17:34.353", "ingestTimestamp" : "2026-06-14T19:19:47.190", "mongoId" : "6a2c68f774d8ee00a0905732", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 155000, "salaryAnnualMax" : 210000, "salaryBand" : "150k-200k", "hasSalary" : true, "allSkills" : [ "SAST", "DAST", "SCA", "Encryption services", "Authz enforcement", "Authn flows", "Token management", "Session management", "MFA", "SSO", "Least-privilege enforcement", "Detection rules", "Application security", "Product security", "Cloud security", "Identity governance", "Threat modeling", "Design reviews", "Code reviews", "Incident response", "Cloud hardening", "Detection and response", "Security roadmap", "Secure coding", "Security architecture", "AI era", "Access management", "Enterprise software", "Auth0 integration", "AWS IAM", "EKS", "KMS", "Network segmentation", "OAuth 2.0", "OIDC", "SAML", "Containerized environments", "CI/CD" ], "skillCount" : 38, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Mid", "dataQualityScore" : 0.8888889, "_score" : 1146.7313, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.98 }, { "id" : "68e6b1db70f0b99d58d66daf", "title" : "Application Security Engineer", "company" : "Amazon Development Centre (London) Limited", "industry" : "Systems, Quality, Security Engineering, Systems Security Engineering, amazon security", "salary" : { "min" : 55000.0, "max" : 75000.0, "currency" : "GBP", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Junior Application Security Engineer in London, adjusted for the technology industry and Amazon's company size." }, "location" : "London, England, GBR", "locations" : [ "London, England, GBR" ], "timestamp" : "2026-06-16T01:57:26.450", "fingerprint" : "d3974ea204548c28f42f84f0a96ba4fbca435835132ce4e66af95d7724c72fad", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.com/jobs/3102637/apply", "externalId" : "03491f98-e093-4403-96b4-f3dffbb26348", "industryFunction" : { }, "structuredLocations" : [ { "city" : "London", "country" : "United Kingdom", "continent" : "eu", "source" : "llm", "workMode" : "onsite", "geo" : "51.5074456,-0.1277653" } ], "locationText" : "London, United Kingdom", "employmentType" : "FULL_TIME", "experienceMinYears" : 0, "experienceMaxYears" : 2, "experienceLevel" : "Entry", "remoteFriendly" : false, "workSiteFlexibility" : "onsite", "rawDescription" : "At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores. Amazon is continuously innovating new services and features for our customers. Our engineers invent, build, and sometimes break things to make them easier, faster, better, and more cost-effective. However, no matter what we’re building – from websites to web services, AR to AI, drones to devices – security is always our top priority. The Amazon Application Security team focuses on working with our builders to provide experiences that our customers can trust. That means constantly learning new things and solving complex problems to protect the safety, security, and privacy of billions of lives on a global scale. At Amazon, you’ll be working with the best minds in technology and security. Learn and be curious here, and accelerate your career growth. You can take pride in knowing that your work is meaningful, having a positive impact on others and making the world a better place. We are looking for an application security engineer to join the Application Security team. You should know how to prioritize, communicate clearly and compellingly, and understand how to maintain a high level of focus and excellence in a growing application landscape. Passion and discipline around cloud computing is critical, as is a high level of ownership and accountability. This position is for earlier career engineers who are starting their journey in security. We know not everyone has research experience in a company, we are interested in candidates with different types of research experience, even if it is independent, in university or in adjacent fields to vulnerability research. Key job responsibilities Your work will include: - First party application security research - Identifying and mitigating security issues at scale - Creating tools for security research - Working with internal software development teams on securing their applications - Security guidance documentation - Assistance with recruiting activities About the team Diverse Experiences Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying. Why Amazon Security? At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores. Inclusive Team Culture In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices. Training & Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why we strive for flexibility as part of our working culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve. Mentorship & Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, mentorship and other career-advancing resources here to help you develop into a better-rounded professional. #Joinstoresappsec Basic Qualifications: - Bachelor's degree in computer science or equivalent - Knowledge of networking protocols such as HTTP, DNS and TCP/IP - Experience programming in Python, Ruby, Go, Swift, Java, .Net, C++ or similar object oriented language Preferred Qualifications: - Experience with AWS products and services - Experience with any combination of the following: threat modeling, secure coding, identity management and authentication, software development, cryptography, system administration and network security - Experience with programming languages such as Python, Java, C++ Amazon is an equal opportunities employer. We believe passionately that employing a diverse workforce is central to our success. We make recruiting decisions based on your experience and skills. We value your passion to discover, invent, simplify and build. Protecting your privacy and the security of your data is a longstanding top priority for Amazon. Please consult our Privacy Notice ( https://www.amazon.jobs/en/privacy_page ) to know more about how we collect, use and transfer the personal data of our candidates. Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.", "summaryDescription" : "Application Security Engineer at Amazon Development Centre (London) Limited", "postedDate" : "2026-06-14T17:34:06.997", "createdAt" : "2026-06-14T17:34:06.997", "lastUpdated" : "2026-06-16T01:57:26.450", "ingestTimestamp" : "2026-06-14T17:34:06.997", "mongoId" : "68e6b1db70f0b99d58d66daf", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.com/jobs/3102637/apply", "salaryBand" : "50k-75k", "hasSalary" : false, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Junior", "dataQualityScore" : 0.8888889, "_score" : 1134.2096, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2ca05874d8ee00a09a1fa1", "title" : "Application Security Engineer | Senior", "company" : "Nord Security", "industry" : "NordVPN", "salary" : { "min" : 23000.0, "max" : 30000.0, "currency" : "PLN", "frequency" : "Yearly" }, "location" : "Poland", "locations" : [ "Poland" ], "timestamp" : "2026-06-16T02:09:34.478", "fingerprint" : "856bdcaa0bd58b79ed0d8827c6821d37ca620b93f281885e565c9c0887f7568a", "source" : "ashby", "language" : "en", "applyUrl" : "https://jobs.ashbyhq.com/nord-security/0a801592-39cd-4feb-8b5b-7b2cff303cc4/application", "externalId" : "0a801592-39cd-4feb-8b5b-7b2cff303cc4", "industryFunction" : { }, "structuredLocations" : [ { "country" : "Poland", "continent" : "eu", "workMode" : "hybrid" } ], "locationText" : "Poland", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "SAST, DAST, SCA", "professionalSkills" : [ "Problem-solving", "Investigation" ], "hardSkillsList" : [ "Security assessment", "Network protocols", "Secure coding", "OS security" ], "softSkillsList" : [ "Assertiveness", "Compromise" ], "hardSkills" : [ { "name" : "Security assessment", "level" : "intermediate" }, { "name" : "Network protocols", "level" : "intermediate" }, { "name" : "Secure coding", "level" : "intermediate" }, { "name" : "OS security", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Assertiveness" }, { "name" : "Compromise" } ], "majorSkills" : "Application security, Security assessment, Secure implementation", "majorSkillsList" : [ "Application security", "Security assessment", "Secure implementation" ], "coreResponsibilities" : "Ensure software design security, Define secure implementation practices, Sync with product development teams, Ensure security communication between teams, Act as glue between teams, Plan security tool development, Manage security tool development, Create security review tasks, Cooperate with product teams, Learn about product changes, Make educated security decisions, Ensure mobile/desktop apps tested, Ensure browser extensions tested, Design security training, Deliver security training, Look for internal security gaps, Address security questions, Give advice on product security direction", "teamCollaboration" : "Syncing with teams; Communication between technical teams; Cooperate with product teams", "domainKnowledge" : "VPN; Cybersecurity tools; Online security; Online privacy; Data control; OSI model; TCP/IP models; Mobile applications security; Desktop applications security; Browser extensions security; Linux security; Android security; iOS security; macOS security; Windows security", "domainList" : [ "vpn", "cybersecurity-tools", "online-security", "online-privacy", "data-control", "osi-model", "tcp-ip-models", "mobile-applications-security", "desktop-applications-security", "browser-extensions-security", "linux-security", "android-security", "ios-security", "macos-security", "windows-security" ], "domainSpecificKnowledge" : [ "VPN", "Cybersecurity tools", "Online security", "Online privacy", "Data control", "OSI model", "TCP/IP models", "Mobile applications security", "Desktop applications security", "Browser extensions security", "Linux security", "Android security", "iOS security", "macOS security", "Windows security" ], "continuousLearning" : "Training programs; Mentorship; Career-switch opportunities", "problemSolvingSkills" : "Problem-solving; Investigation", "qualificationsBasic" : "Mobile/desktop applications security assessment experience, Network understanding (OSI, TCP/IP), Experience defining security test scope, Secure coding knowledge, Problem-solving and investigation skills, Experience with different OS security, Ability to build relationships, Ability to make product-related business decisions, Assertiveness and ability to compromise", "qualificationsPreferred" : "SAST/DAST/SCA results experience, Application security testing experience, Mentorship and career-switch opportunities", "remoteFriendly" : true, "workSiteFlexibility" : "Hybrid", "rawDescription" : "The world’s most advanced VPN, and a whole lot more. If you’re a curious problem-solver who carves their own path, join the team behind Threat Protection Pro, the NordLynx protocol, and the fastest VPN on the planet—tools that put privacy, security, and control back in people’s hands. Your impact? Helping millions take back control of their online security, privacy, and data. Main Responsibilities - Ensure software design security and define secure implementation practices by syncing with teams responsible for the actual product development. - Ensure that security-related communication between technical teams involved in releasing the product is smooth (act as a “glue” between all teams so everyone’s on the same page); - Plan and manage development of security tools within the team; - Create tasks for the product's security reviews (SAST/DAST/SCA results, application security testing, etc.). - Cooperate with product teams to learn about changes introduced into the product early to make educated security decisions. - Ensure mobile/desktop applications and browser extensions are sufficiently tested. - Support internal and external audits; - Design and deliver training for security engineering awareness & adoption. - Actively look for internal security gaps within the product or organization overall. - Address security questions and give advice regarding the direction of the product's security. Core Requirements - Proven experience in mobile/desktop applications security assessment: planning, testing, methodologies, and vulnerability reporting; - Good understanding of how networks work (OSI and TCP/IP models) with a particular focus on VPNs; - Experience working with stakeholders to define the scope of security tests and identify remediation actions to address any vulnerabilities identified; - Knowledge of secure coding practices; - Sense of ownership with strong problem-solving and investigation skills; - Experience with different OS (Linux, Android, iOS, macOS, Windows) security topics; - Ability to build and maintain relationships, influence key stakeholders across the business; - Ability to make product-related business decisions based on threats and vulnerabilities affecting it; - A healthy dose of assertiveness combined with an ability to compromise. WHAT WE OFFER Innovate with industry leaders Work alongside global experts to build world-leading cybersecurity tools, impacting millions of users around the world. Learn & grow Boost your skills via our extensive training programs (online and offline) & other resources. Benefit from mentorship and career-switch opportunities to grow within the company. Hybrid work Enjoy the flexibility with 3 office days and working from home for the remaining 2. Work from anywhere Recharge with a change of scenery – choose work from any location when you feel a need to power your creativity and drive. Physical well-being Fuel your active lifestyle with online workouts led by our Physical Well-Being experts. Unlock a variety of sports and wellness facilities, like gyms, swimming pools, and fitness classes, with the Multisport card. Mental & emotional health Nurture your mind with free psychologist consultations, dedicated mental health events, and premium access to top-rated wellness apps like Calm, Headspace, and Mindletic. Premium healthcare Receive private health insurance giving you peace of mind for your health needs. Joyful moments – special treats Celebrate life’s big moments with special gifts from us on your birthday, anniversary, and other major events, such as weddings or the arrival of a new family member. Company events & team-building Experience iconic Nord Security celebrations, team-buildings, and knowledge-sharing events, nurturing bonds that fuel our success. Workation Embark on a legendary company getaway abroad, filled with exciting activities, live concerts, engaging workshops, and epic time together. Kindly refer to our Privacy Notice for Recruitment Candidates https://drive.google.com/file/d/1b2tV684_SYV1jQ4kuf91cnzrRBk3ef-5/view for comprehensive information regarding our data handling procedures throughout recruitment processes. We expect all candidates to provide accurate and complete information during the recruitment process. While limited use of AI tools to refine application materials is acceptable, candidates remain fully responsible for ensuring that their submissions reflect their own qualifications, skills, and experience. Any failure to do so may negatively affect participation in the recruitment process. If broader AI assistance is allowed for a particular role or stage, we’ll let you know in advance. By submitting your application, you acknowledge that it may be processed using automated tools for evaluation purposes. As part of our recruitment process, we may use an AI-based application review tool to help assess applications based on skills and experience relevant to the role. This technology is used to support - not replace - human decision-making, and every application is ultimately reviewed by a recruiter. If you would like more information about how AI is used in this process or wish to exercise your rights under applicable data privacy laws, please contact us at privacy@nordaccount.com. Should you prefer to opt out of the automated evaluation, please submit your application directly to career@nordsec.com.", "summaryDescription" : "Application Security Engineer | Senior at Nord Security. Skills: Application security, Security assessment, Secure implementation. Ensure software design security. Define secure implementation practices", "createdAt" : "2026-06-14T19:30:33.809", "lastUpdated" : "2026-06-16T02:09:34.478", "ingestTimestamp" : "2026-06-14T19:30:33.809", "mongoId" : "6a2ca05874d8ee00a09a1fa1", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "<30k", "hasSalary" : false, "allSkills" : [ "Security assessment", "Network protocols", "Secure coding", "OS security", "Assertiveness", "Compromise", "Application security", "Secure implementation", "Problem-solving", "Investigation", "VPN", "Cybersecurity tools", "Online security", "Online privacy", "Data control", "OSI model", "TCP/IP models", "Mobile applications security", "Desktop applications security", "Browser extensions security", "Linux security", "Android security", "iOS security", "macOS security", "Windows security" ], "skillCount" : 25, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 0.8888889, "_score" : 1119.3062, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.98 }, { "id" : "6a191e7758b93c861e39f6f5", "title" : "Application Security Engineer", "company" : "Mercedes-Benz", "salary" : { "min" : 2200000.0, "max" : 3500000.0, "currency" : "INR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for Application Security Engineer in Bangalore, India, adjusted for mid-seniority, technology industry, and large company size." }, "location" : "India-Karnataka-Bangalore", "locations" : [ "India-Karnataka-Bangalore", "Brigade Tech Gardens, Katha No. 119, Kundalahalli Village, K.R. Puram Hobli, Ward No. 85, Bangalore" ], "timestamp" : "2026-06-16T00:44:32.317", "fingerprint" : "80177baefad31febb3fb931a065ecdbe813101a6cab2849afd794bcebb8e1aca", "source" : "taleo", "language" : "en", "applyUrl" : "https://tas-daimler.taleo.net/careersection/ex/jobdetail.ftl?job=889852", "externalId" : "889852", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Bangalore", "state" : "Karnataka", "country" : "India", "continent" : "as", "source" : "llm", "workMode" : "onsite", "geo" : "12.9767936,77.5900820" } ], "locationText" : "Bangalore, Karnataka, India", "experienceMinYears" : 4, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "remoteFriendly" : false, "rawDescription" : "About MBRDI Mercedes-Benz Research and Development India (MBRDI), headquartered in Bengaluru with a satellite office in Pune, is the largest R&D center for Mercedes-Benz Group AG outside of Germany. Our mission is to drive innovation and excellence in automotive engineering, digitalization, and sustainable mobility solutions, shaping the future of mobility. Job Title: Application Security Engineer Job Overview We are seeking a highly motivated and experienced Application Security Engineer with 4+ years of hands-on technical experience to join our team and drive DevSecOps initiatives. In this role, you will be instrumental in embedding security throughout the software development lifecycle, from design to deployment and operations. You will leverage your expertise in application security, Azure cloud security , and DevSecOps practices to protect our applications and infrastructure. A strong understanding of cloud-native security principles, particularly within the Azure ecosystem, and experience with security tools like Coverity, Jfrog (Xray), BlackDuck, Polaris, and Wiz is essential. Familiarity with the security implications and best practices for Artificial Intelligence (AI) and Machine Learning (ML) systems is also highly valued. Key Responsibilities: Integrate security tools and processes into the CI/CD pipeline to automate security checks (SAST, DAST, SCA, IaC scanning) using tools like Coverity, Jfrog Xray, BlackDuck, and Polaris. Conduct security reviews, threat modeling, and risk assessments for new and existing applications and services, with a focus on Azure-based deployments and AI/ML components . Collaborate with development and operations teams to implement security best practices and remediate identified vulnerabilities. Utilize Wiz to monitor and improve the security posture of our Azure cloud environments and cloud-native applications. Develop and maintain secure coding guidelines, security standards, and DevSecOps best practices, including those specific to AI/ML systems . Provide security expertise and guidance to development teams throughout the software development lifecycle. Participate in security architecture reviews to ensure security by design for new systems and features, particularly those deployed in Azure and involving AI/ML technologies . Support vulnerability management efforts, including scanning, analysis, prioritization, and tracking of remediation activities. Assist in the evaluation and selection of new security technologies and tools to enhance our DevSecOps capabilities. Stay up-to-date with the latest security threats, vulnerabilities, and industry trends, including advancements in AI/ML security . Qualifications: 4+ years of experience in application security, DevSecOps, or a related field. Strong understanding of secure software development lifecycle (SSDLC) and integrating security into CI/CD pipelines. Proven experience with Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), Software Composition Analysis (SCA), and Infrastructure as Code (IaC) security. Hands-on experience with security tools such as Coverity (SAST), Jfrog (specifically Xray for SCA and artifact security), BlackDuck (SCA), Polaris (for security orchestration/scanning), and Wiz (for cloud-native security and posture management). Solid understanding of cloud security principles and best practices, with significant experience in Azure . Familiarity with common application security vulnerabilities (e.g., OWASP Top 10) and mitigation strategies. Understanding of security challenges and best practices related to AI/ML models, data, and pipelines (e.g., adversarial attacks, data poisoning, model theft, privacy). Experience with scripting languages (e.g., Python, PowerShell, Bash) for automation of security tasks. Excellent problem-solving skills and meticulous attention to detail. Ability to work independently and collaboratively within a dynamic team environment. Must possess strong interpersonal skills, including effective communication, constructive feedback, decision-making, and a high sense of responsibility. Preferred Qualifications: Relevant security certifications such as CSSLP, Azure Security Engineer Associate , AWS Certified Security - Specialty, or equivalent DevSecOps certifications. Experience with threat modeling methodologies and tools. Knowledge of security frameworks and compliance standards (e.g., ISO 27001, NIST, SOC 2, GDPR) as they apply to application and Azure cloud security . Familiarity with container security (e.g., Docker, Kubernetes) and serverless security within Azure (e.g., Azure Kubernetes Service, Azure Functions) . Experience securing AI/ML development and deployment workflows (MLOps security). Experience with security incident response processes related to application vulnerabilities. Why Join Us? • Be part of a purpose-driven organization that is shaping the future of mobility • Work on cutting-edge technologies and global projects • Thrive in a collaborative, diverse, and inclusive environment • Access world-class infrastructure and continuous learning opportunities Equal Opportunity Statement At MBRDI, we are committed to diversity and inclusion. We welcome applications from all qualified individuals, regardless of gender, background, or ability. Mercedes-Benz Research and Development India Private Limited", "summaryDescription" : "Application Security Engineer at Mercedes-Benz", "createdAt" : "2026-06-14T19:42:38.139", "lastUpdated" : "2026-06-16T00:44:32.317", "ingestTimestamp" : "2026-06-14T19:42:38.139", "mongoId" : "6a191e7758b93c861e39f6f5", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Mid", "dataQualityScore" : 0.6666667, "_score" : 1111.6509, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.98 }, { "id" : "6a2ca05874d8ee00a09a1f9f", "title" : "Application Security Engineer | Senior", "industry" : "NordVPN", "salary" : { "min" : 3200.0, "max" : 6300.0, "currency" : "EUR", "frequency" : "Yearly" }, "location" : "Vilnius", "locations" : [ "Vilnius", "Kaunas" ], "timestamp" : "2026-06-16T02:15:55.209", "fingerprint" : "0869b89c01fbefa00412f1b0893729e8014e453bb677f7456e884fbb99d23f1b", "source" : "ashby", "language" : "en", "applyUrl" : "https://jobs.ashbyhq.com/nord-security/877a42a7-db71-4bdf-b4d2-74b7a3392be8/application", "externalId" : "877a42a7-db71-4bdf-b4d2-74b7a3392be8", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Vilnius", "country" : "Lithuania", "continent" : "eu", "source" : "llm", "workMode" : "hybrid", "geo" : "54.6870458,25.2829111" } ], "locationText" : "Vilnius, Lithuania", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "SAST, DAST, SCA", "professionalSkills" : [ "Problem-solving", "Investigation", "Business decisions" ], "hardSkillsList" : [ "Application security assessment", "Secure coding", "Network protocols" ], "softSkillsList" : [ "Problem-solving", "Investigation" ], "hardSkills" : [ { "name" : "Application security assessment", "level" : "intermediate" }, { "name" : "Secure coding", "level" : "intermediate" }, { "name" : "Network protocols", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Problem-solving" }, { "name" : "Investigation" } ], "coreResponsibilities" : "Ensure software design security, Define secure implementation practices, Sync with development teams, Ensure smooth security communication, Act as security glue, Plan security tool development, Manage security tool development, Create security review tasks, Cooperate with product teams, Learn product changes early, Make educated security decisions, Ensure mobile app testing, Ensure desktop app testing, Ensure browser extension testing, Design security training, Deliver security training, Look for security gaps, Address security questions, Give security advice", "teamCollaboration" : "Syncing with teams; Cooperate with product teams", "domainKnowledge" : "OSI model; TCP/IP models; Mobile applications security; Desktop applications security", "domainList" : [ "osi-model", "tcp-ip-models", "mobile-applications-security", "desktop-applications-security" ], "domainSpecificKnowledge" : [ "OSI model", "TCP/IP models", "Mobile applications security", "Desktop applications security" ], "communicationSkills" : "Security-related communication", "continuousLearning" : "Training programs", "problemSolvingSkills" : "Problem-solving; Investigation", "qualificationsBasic" : "Proven experience mobile/desktop security assessment, Good understanding networks, Experience working with stakeholders, Knowledge of secure coding, Sense of ownership, Experience with different OS security, Ability to build relationships, Ability to influence stakeholders, Ability to make business decisions, Assertiveness, Ability to compromise", "remoteFriendly" : true, "workSiteFlexibility" : "Flexible", "rawDescription" : "THE WORLD’S MOST ADVANCED VPN, AND A WHOLE LOT MORE. If you’re a curious problem-solver who carves their own path, join the team behind Threat Protection Pro, the NordLynx protocol, and the fastest VPN on the planet—tools that put privacy, security, and control back in people’s hands. Your impact? Helping millions take back control of their online security, privacy, and data. MAIN RESPONSIBILITIES - Ensure software design security and define secure implementation practices by syncing with teams responsible for the actual product development. - Ensure that security-related communication between technical teams involved in releasing the product is smooth (act as a “glue” between all teams so everyone’s on the same page); - Plan and manage development of security tools within the team; - Create tasks for the product's security reviews (SAST/DAST/SCA results, application security testing, etc.). - Cooperate with product teams to learn about changes introduced into the product early to make educated security decisions. - Ensure mobile/desktop applications and browser extensions are sufficiently tested. - Support internal and external audits; - Design and deliver training for security engineering awareness & adoption. - Actively look for internal security gaps within the product or organization overall. - Address security questions and give advice regarding the direction of the product's security. CORE REQUIREMENTS - Proven experience in mobile/desktop applications security assessment: planning, testing, methodologies, and vulnerability reporting; - Good understanding of how networks work (OSI and TCP/IP models) with a particular focus on VPNs; - Experience working with stakeholders to define the scope of security tests and identify remediation actions to address any vulnerabilities identified; - Knowledge of secure coding practices; - Sense of ownership with strong problem-solving and investigation skills; - Experience with different OS (Linux, Android, iOS, macOS, Windows) security topics; - Ability to build and maintain relationships, influence key stakeholders across the business; - Ability to make product-related business decisions based on threats and vulnerabilities affecting it; - A healthy dose of assertiveness combined with an ability to compromise. WHAT WE OFFER Innovate with industry leaders Work alongside global experts to build world-leading cybersecurity tools, impacting millions of users around the world. Learn & grow Boost your skills via our extensive training programs (online and offline) & other resources. Benefit from mentorship and career-switch opportunities to grow within the company. Work in a next-gen Cyber City office Thrive in our bustling office, featuring ergonomic workspaces, modern meeting rooms, engaging events, and specialty coffee to fuel your day. Hybrid work Enjoy the flexibility with 3 office days and working from home for the remaining 2. Work from anywhere Recharge with a change of scenery – choose work from any location when you feel a need to power your creativity and drive. Physical well-being Boost your health with free-of-charge 24/7 gym access, onsite and online workouts, and consultations led by in-house Physical Well-Being experts. Mental & emotional health Nurture your mind with free psychologist consultations, dedicated mental health events, and premium access to top-rated wellness apps like Calm, Headspace, and Mindletic. Premium healthcare Receive private health insurance giving you peace of mind for your health needs. Extra days off Enjoy additional vacation days off as you grow with us. Plus, get extra days for sick leave, special occasions, or parenting needs. Joyful moments – special treats Celebrate life’s big moments with special gifts from us on your birthday, anniversary, and other major events, such as weddings or the arrival of a new family member. Company events & team-building Experience iconic Nord Security celebrations, team-buildings, and knowledge-sharing events, nurturing bonds that fuel our success. Workation Embark on a legendary company getaway abroad, filled with exciting activities, live concerts, engaging workshops, and epic time together. Kindly refer to our Privacy Notice for Recruitment Candidates https://drive.google.com/file/d/1b2tV684_SYV1jQ4kuf91cnzrRBk3ef-5/view for comprehensive information regarding our data handling procedures throughout recruitment processes. We expect all candidates to provide accurate and complete information during the recruitment process. While limited use of AI tools to refine application materials is acceptable, candidates remain fully responsible for ensuring that their submissions reflect their own qualifications, skills, and experience. Any failure to do so may negatively affect participation in the recruitment process. If broader AI assistance is allowed for a particular role or stage, we’ll let you know in advance. By submitting your application, you acknowledge that it may be processed using automated tools for evaluation purposes. As part of our recruitment process, we may use an AI-based application review tool to help assess applications based on skills and experience relevant to the role. This technology is used to support - not replace - human decision-making, and every application is ultimately reviewed by a recruiter. If you would like more information about how AI is used in this process or wish to exercise your rights under applicable data privacy laws, please contact us at privacy@nordaccount.com. Should you prefer to opt out of the automated evaluation, please submit your application directly to career@nordsec.com.", "summaryDescription" : "Application Security Engineer | Senior. Ensure software design security. Define secure implementation practices", "createdAt" : "2026-06-14T18:39:42.217", "lastUpdated" : "2026-06-16T02:15:55.209", "ingestTimestamp" : "2026-06-14T18:39:42.217", "mongoId" : "6a2ca05874d8ee00a09a1f9f", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "<30k", "hasSalary" : false, "allSkills" : [ "Application security assessment", "Secure coding", "Network protocols", "Problem-solving", "Investigation", "Business decisions", "OSI model", "TCP/IP models", "Mobile applications security", "Desktop applications security" ], "skillCount" : 10, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 0.7777778, "_score" : 1107.5487, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Cybersecurity", "llmIndustryConfidence" : 0.98 }, { "id" : "6a2c7eca74d8ee00a0953a6c", "title" : "Senior Software Security Architect", "company" : "Commvault", "industry" : "Technology", "salary" : { "min" : 3500000.0, "max" : 5500000.0, "currency" : "INR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for Senior Software Security Architect in Bangalore, India, adjusted for seniority, technology industry, and company size." }, "location" : "Bangalore, India", "locations" : [ "Bangalore", "India" ], "certifications" : [ "CSSLP", "CISSP", "SABSA", "TOGAF", "GICSP" ], "timestamp" : "2026-06-15T11:35:30.719", "fingerprint" : "3fb393e2d316c9b8b3e06681338966f529d212c6ce6e3e42c408a816b2092dff", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.greenhouse.io/commvault/jobs/5253729008", "externalId" : "5253729008", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Bangalore", "country" : "India", "continent" : "as", "source" : "llm", "workMode" : "onsite", "geo" : "12.9767936,77.5900820" } ], "locationText" : "Bangalore, India", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "Software security, Cloud security, On-premises security, Hybrid security, GenAI solutions", "professionalSkills" : [ "Architecture review", "Threat modeling", "System design", "Security controls design", "Security patterns design" ], "hardSkillsList" : [ "Threat modeling methodologies", "Secure coding practices", "SDLC", "DevSecOps integration" ], "hardSkills" : [ { "name" : "Threat modeling methodologies", "level" : "intermediate" }, { "name" : "Secure coding practices", "level" : "intermediate" }, { "name" : "SDLC", "level" : "intermediate" }, { "name" : "DevSecOps integration", "level" : "intermediate" } ], "majorSkills" : "Software security architecture, Threat modeling, Security architecture review", "majorSkillsList" : [ "Software security architecture", "Threat modeling", "Security architecture review" ], "coreResponsibilities" : "Conduct security architecture reviews, Perform threat modeling, Identify security risks, Define mitigation strategies, Design secure systems, Guide secure software design, Evaluate automated tools, Implement automated tools, Support architecture reviews, Support security assessments, Create security architecture documentation, Maintain security architecture documentation, Provide expert guidance, Contribute to security standards, Contribute to security frameworks, Contribute to security processes, Stay current on threats, Stay current on vulnerabilities, Stay current on regulatory requirements", "teamCollaboration" : "Development teams; DevOps teams; Product owners; Technical stakeholders; Non-technical stakeholders", "domainKnowledge" : "Modern software development; Security best practices; Cloud platforms; Cyber resilience; Data protection; Data security; Data intelligence; Data recovery", "domainList" : [ "modern-software-development", "security-best-practices", "cloud-platforms", "cyber-resilience", "data-protection", "data-security", "data-intelligence", "data-recovery" ], "domainSpecificKnowledge" : [ "Modern software development", "Security best practices", "Cloud platforms", "Cyber resilience", "Data protection", "Data security", "Data intelligence", "Data recovery" ], "toolProficiency" : [ "IriusRisk", "ThreatModeler" ], "communicationSkills" : "Technical communication; Non-technical communication", "documentationSkills" : "Security architecture documentation", "qualificationsBasic" : "5+ years application security architecture, 5+ years software security architecture, Knowledge of threat modeling methodologies, Hands-on security architecture reviews, Familiarity with automated security tools, Experience reviewing GenAI solutions, Understanding of secure coding practices, Understanding of SDLC, Understanding of DevSecOps integration, Excellent communication skills", "qualificationsPreferred" : "CSSLP certification, CISSP certification, SABSA certification, TOGAF certification, GICSP certification, Experience in regulated environments, Familiarity with AWS, Familiarity with Azure, Familiarity with GCP, Experience in Agile environments, Experience in CI/CD environments", "rawDescription" : "Recruitment Fraud Alert We’ve learned that scammers are impersonating Commvault team members—including HR and leadership—via email or text. These bad actors may conduct fake interviews and ask for personal information, such as your social security number. What to know: Commvault does not conduct interviews by email or text. We will never ask you to submit sensitive documents (including banking information, SSN, etc) before your first day. If you suspect a recruiting scam, please contact us at wwrecruitingteam@commvault.com About Commvault Commvault (NASDAQ: CVLT) is the gold standard in cyber resilience. The company empowers customers to uncover, take action, and rapidly recover from cyberattacks – keeping data safe and businesses resilient. The company’s unique AI-powered platform combines best-in-class data protection, exceptional data security, advanced data intelligence, and lightning-fast recovery across any workload or cloud at the lowest TCO. For over 25 years, more than 100,000 organizations and a vast partner ecosystem have relied on Commvault to reduce risks, improve governance, and do more with data. Senior Software Security Architect The Opportunity: We are seeking a highly skilled Senior Software Security Architect to lead the design and evaluation of secure software architectures across a diverse range of systems and applications. The ideal candidate will have deep expertise in security architecture review and threat modeling, with a strong understanding of modern software development practices and security best practices. Experience with automated tools for security architecture analysis and relevant security certifications is strongly preferred. What you’ll do… Conduct in-depth security architecture reviews across cloud, on-premises, and hybrid environments. Perform threat modeling to identify potential security risks and define mitigation strategies early in the development of lifecycle. Work closely with development teams, DevOps, and product owners to design secure systems and guide secure software design decisions. Evaluate and implement automated tools to support architecture reviews and continuous security assessments. Create and maintain security architecture documentation and reusable patterns. Provide expert guidance on security controls, design patterns, and industry best practices. Contribute to the development and improvement of internal security standards, frameworks, and processes. Stay current on emerging threats, vulnerabilities, and regulatory requirements Who you are? 5+ years of experience in application or software security architecture. Strong knowledge of threat modeling methodologies (e.g., STRIDE, PASTA, OCTAVE). Hands-on experience conducting security architecture reviews for complex systems. Familiarity with automated security architecture tools (e.g., IriusRisk, ThreatModeler, Microsoft Threat Modeling Tool, or similar). Experience in reviewing architecture GenAI solutions Strong understanding of secure coding practices, software development lifecycle (SDLC), and DevSecOps integration. Excellent communication skills to collaborate with both technical and non-technical stakeholders. Preferred Qualifications: Relevant certifications such as CSSLP, CISSP, SABSA, TOGAF, or GICSP. Experience in regulated environments (e.g., finance, healthcare, or critical infrastructure). Familiarity with cloud platforms (AWS, Azure, GCP) and associated security architectures. Experience working in Agile or CI/CD environments. You’ll love working here because... Continuous professional development, product training, and career pathing Annual health check-ups, Tuition Reimbursement An inclusive company culture, an opportunity to join our Community Guilds Personal accident cover and Term life cover Ready to #makeyourmark at Commvault? Apply now! #LI-RK1 Commvault is an equal opportunity workplace and is an affirmative action employer. We are always committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity or Veteran status and we will not discriminate against on the basis of such characteristics or any other status protected by the laws or regulations in the locations where we work. Commvault’s goal is to make interviewing inclusive and accessible to all candidates and employees. If you have a disability or special need that requires accommodation to participate in the interview process or apply for a position at Commvault, please email accommodations@commvault.com For any inquiries not related to an accommodation please reach out to wwrecruitingteam@commvault.com. Commvault's Privacy Policy", "summaryDescription" : "Senior Software Security Architect at Commvault. Skills: Software security architecture, Threat modeling, Security architecture review. Conduct security architecture reviews. Perform threat modeling", "postedDate" : "2026-06-14T04:37:20.057", "createdAt" : "2026-06-14T04:37:20.057", "lastUpdated" : "2026-06-15T11:35:30.719", "ingestTimestamp" : "2026-06-14T04:37:20.057", "mongoId" : "6a2c7eca74d8ee00a0953a6c", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "Threat modeling methodologies", "Secure coding practices", "SDLC", "DevSecOps integration", "Software security architecture", "Threat modeling", "Security architecture review", "Architecture review", "System design", "Security controls design", "Security patterns design", "Modern software development", "Security best practices", "Cloud platforms", "Cyber resilience", "Data protection", "Data security", "Data intelligence", "Data recovery", "CSSLP", "CISSP", "SABSA", "TOGAF", "GICSP", "IriusRisk", "ThreatModeler" ], "skillCount" : 26, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 0.8888889, "_score" : 1077.9562, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.98 }, { "id" : "6a2c8d8a74d8ee00a09794c1", "title" : "Application Security Engineer", "company" : "Sequoia", "industry" : "Scalability-Defense", "salary" : { "min" : 145000.0, "max" : 205000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Senior Application Security Engineer in Tempe, United States, adjusted for the technology industry and company size." }, "location" : "Tempe", "locations" : [ "Tempe" ], "timestamp" : "2026-06-15T07:59:14.818", "fingerprint" : "3039912f04cdf3a4488a38f076613815c1d1efdb9660a49c75f50fbd0b0ee13c", "source" : "ashby", "language" : "en", "applyUrl" : "https://jobs.ashbyhq.com/sequoia/d4ce8c14-ff6a-4bf6-8e34-b1d0f630c14e/application", "externalId" : "d4ce8c14-ff6a-4bf6-8e34-b1d0f630c14e", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Tempe", "state" : "Arizona", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "33.4255117,-111.9400160" } ], "locationText" : "Tempe, Arizona, United States", "employmentType" : "FULL_TIME", "technicalSkills" : "Python, Ruby, Go, Swift, Java, Net, C++, AWS", "professionalSkills" : [ "Application development", "Application security", "Secure architecture design", "Identity management", "Authentication", "Cryptography", "System administration", "Network security", "Software vulnerability assessments" ], "hardSkillsList" : [ "Secure coding", "Penetration testing", "Threat modeling", "Attack surface analysis" ], "hardSkills" : [ { "name" : "Secure coding", "level" : "intermediate" }, { "name" : "Penetration testing", "level" : "intermediate" }, { "name" : "Threat modeling", "level" : "intermediate" }, { "name" : "Attack surface analysis", "level" : "intermediate" } ], "majorSkills" : "Application security, Threat modeling, Penetration testing, Secure coding", "majorSkillsList" : [ "Application security", "Threat modeling", "Penetration testing", "Secure coding" ], "coreResponsibilities" : "Provide application security expertise, Manage application security analytics, Validate web applications, Test web applications, Undertake threat modelling, Conduct penetration testing, Maintain documentation, Conduct application security reviews, Perform penetration testing, Provide training, Provide outreach, Develop security guidance documentation, Develop security tools, Deliver security metrics, Improve security posture, Perform application security reviews, Perform mobile security reviews, Design secure architecture, Conduct threat modeling, Perform projects and research, Provide security training, Provide security outreach, Develop security guidance, Develop security tools, Deliver security metrics", "teamCollaboration" : "Internal development teams", "domainKnowledge" : "OWASP Top 10 vulnerabilities; Software Development LifeCycle; Cloud-native architecture; Identity and authentication; System administration; Network security; Component Analysis; SQL Injection; Cross-site Scripting; Cross-Site Request Forgery; PASTA methodology; STRIDE methodology; OWASP Best practices; OWASP Testing Guide; OWASP Code Review Guide", "domainList" : [ "owasp-top-10-vulnerabilities", "software-development-lifecycle", "cloud-native-architecture", "identity-and-authentication", "system-administration", "network-security", "component-analysis", "sql-injection", "cross-site-scripting", "cross-site-request-forgery", "pasta-methodology", "stride-methodology", "owasp-best-practices", "owasp-testing-guide", "owasp-code-review-guide" ], "domainSpecificKnowledge" : [ "OWASP Top 10 vulnerabilities", "Software Development LifeCycle", "Cloud-native architecture", "Identity and authentication", "System administration", "Network security", "Component Analysis", "SQL Injection", "Cross-site Scripting", "Cross-Site Request Forgery", "PASTA methodology", "STRIDE methodology", "OWASP Best practices", "OWASP Testing Guide", "OWASP Code Review Guide" ], "toolProficiency" : [ "OWASP Dependency-Check", "Bytesafe Dependency Checker", "Patton", "PHP Security Checker", "Nmap", "NetCat", "Spiders", "Burp Suite", "MetaSploit", "AppScan", "WebInspect" ], "documentationSkills" : "Security guidance documentation", "problemSolvingSkills" : "Identify vulnerabilities; Assess security controls; Identify potential weaknesses", "outcomesObjectives" : "Improve overall security posture", "qualificationsBasic" : "5+ years experience, 3+ years programming, 2+ years threat modeling, 3+ years application security technologies, Bachelor's degree in computer science", "qualificationsPreferred" : "Application security engineer experience, Experience with Recon tools, Experience with Mapping tools, Experience with Exploitation tools, Knowledge of Threat modeling methodologies, Knowledge of OWASP Best practices, Knowledge of OWASP Testing Guide, Knowledge of OWASP Code Review Guide", "remoteFriendly" : true, "rawDescription" : "Who We Are: Sequoia is the strategic partner helping investor-backed companies of all sizes achieve their business goals through smarter people spend. For 24 years, we’ve guided the most innovative employers to navigate growth and get the most out of their global people investment. With our expert advisory team and integrated platform, we help clients drive business impact through their total comp and benefits, improving executive decision making, controlling costs, protecting the business, and elevating the employee experience. Visit Sequoia.com http://Sequoia.com or follow us on LinkedIn https://www.linkedin.com/company/sequoia-tpi/%22%20/t%20%22_blank to learn more. As an Application Security Engineer, you will be providing application security expertise throughout the Software Development LifeCycle (SDLC) as well as being responsible for managing and driving forward the Application Security Analytics practices. A key part of your role will also involve validating and testing web applications in order to ensure applications meet the requirements of the SDLC Policy and industry best practices. In addition, undertaking threat modelling and conducting periodic penetration testing using best of breed tools, a good understanding of the OWASP Top 10 vulnerabilities and maintaining documentation. You'll perform various day-to-day activities related to ensuring the security of Sequoias application environment. These tasks may include conducting application security reviews to identify vulnerabilities in software applications that could be exploited by attackers, performing penetration testing to assess the effectiveness of existing security controls and identify potential weaknesses, providing training and outreach to internal development teams to improve their understanding of security best practices, developing security guidance documentation to help others understand how to implement secure systems and applications, developing security tools to automate or streamline security processes, delivering security metrics to stakeholders and working on improving the overall security posture of your organization. What You Get to Do: - Application security reviews - Mobile security reviews - Secure architecture design - Threat modeling - Projects and research work as needed - Security training and outreach to internal development teams - Security guidance documentation - Security tool development - Security metrics delivery and improvements - Assistance with recruiting activities and administrative work What You Bring: -  5+ years' experience with emphasis on application development, application security or related fields. -  3+ years of programming in Python, Ruby, Go, Swift, Java, .Net, C++ or similar object-oriented language experience -  2+ years of any combination of the following: threat modeling experience, secure coding, identity management and authentication, software development, cryptography, system administration and network security experience -  3+ years' experience in application security technologies with knowledge of application security threats. Experience with threat modeling, attack surface analysis, penetration testing, software vulnerability assessments, and understanding of software security threat vectors. -  Knowledge of Component Analysis using tools such as OWASP Dependency-Check, Bytesafe Dependency Checker, Patton, PHP Security Checker, etc. -  Experience with static and dynamic application security testing. -  Experience with AWS products and services -  Bachelor's degree in computer science or equivalent  Preferences: -  Experience as an application security engineer using a suite of tools used for the following: -  Recon and Information Gathering (e.g. Nmap, NetCat, Spiders, OWASP Zed Attack Proxy). -  Mapping and Discovery (e.g. Burp Suite with plug-ins) -  Exploitation of top OWASP vulnerabilities such as SQL Injection, Cross-site Scripting (XSS), Cross-Site Request Forgery (CSRF) attacks, etc. Experience with tools such as MetaSploit, AppScan or WebInspect. -  Knowledge of Threat modeling using PASTA and STRIDE methodology. -  Knowledge of OWASP Best practices -  Knowledge of OWASP Testing Guide 4.0 -  Knowledge of OWASP Code Review 2.0 -  Knowledge of Software Component Verification Sequoia’s Culture – Our most important asset - Integrity - Passion for service - Innovative - Growth oriented - Caring for others - Promise-centric - Focused on relationship building Sequoia provides equal opportunity to all applicants without regard to race, color, creed, religion, citizenship, national origin, age, sex, sexual orientation, gender identity, pregnancy, marital status, military or veteran status, disability, or any other basis prohibited by applicable law. Compensation & Benefits Sequoia provides competitive compensation including base salary, performance-based bonus programs, and comprehensive benefits package. Sequoia’s Candidate Privacy Policy https://www.sequoia.com/legal/candidate-privacy-policy/ ", "summaryDescription" : "Application Security Engineer at Sequoia. Skills: Application security, Threat modeling, Penetration testing, Secure coding. Provide application security expertise. Manage application security analytics", "createdAt" : "2026-06-13T23:08:27.717", "lastUpdated" : "2026-06-15T07:59:14.818", "ingestTimestamp" : "2026-06-13T23:08:27.717", "mongoId" : "6a2c8d8a74d8ee00a09794c1", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 145000, "salaryAnnualMax" : 205000, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Secure coding", "Penetration testing", "Threat modeling", "Attack surface analysis", "Application security", "Application development", "Secure architecture design", "Identity management", "Authentication", "Cryptography", "System administration", "Network security", "Software vulnerability assessments", "OWASP Top 10 vulnerabilities", "Software Development LifeCycle", "Cloud-native architecture", "Identity and authentication", "Component Analysis", "SQL Injection", "Cross-site Scripting", "Cross-Site Request Forgery", "PASTA methodology", "STRIDE methodology", "OWASP Best practices", "OWASP Testing Guide", "OWASP Code Review Guide", "OWASP Dependency-Check", "Bytesafe Dependency Checker", "Patton", "PHP Security Checker", "Nmap", "NetCat", "Spiders", "Burp Suite", "MetaSploit", "AppScan", "WebInspect" ], "skillCount" : 37, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 0.7777778, "_score" : 1072.0157, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.98 }, { "id" : "6a305775f292fd229cf39ef1", "title" : "Principal Software Engineer", "company" : "Upstart", "industry" : "FinTech", "salary" : { "min" : 120000.0, "max" : 180000.0, "currency" : "EUR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market data for Principal Software Engineer in Bulgaria, adjusted for executive seniority and FinTech industry in 2024-2025." }, "location" : "Remote", "locations" : [ "Remote" ], "timestamp" : "2026-06-16T05:03:18.154", "fingerprint" : "8b5d5bfa7b4b45765a23f7b0aea2f40bcba29a7935b296edc2d44779028a4f02", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://careers.upstart.com/jobs?gh_jid=7664787", "externalId" : "7664787", "industryFunction" : { }, "structuredLocations" : [ { "country" : "Bulgaria", "continent" : "eu", "workMode" : "remote" } ], "locationText" : "Bulgaria", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "remoteFriendly" : true, "workSiteFlexibility" : "Remote", "rawDescription" : "About Upstart At Upstart, we’re united by a mission that matters: to radically reduce the cost and complexity of borrowing for all Americans. Every day, we bring creativity, experimentation, and advanced AI to reshape access to credit, helping millions move forward financially with clarity and confidence. As the leading AI lending marketplace, we partner with banks and credit unions to expand access to affordable credit through technology that’s both radically intelligent and deeply human. Our platform runs over one million predictions per borrower using more than 1,800 signals, powering smarter, fairer decisions for millions of customers. But the numbers only hint at the impact. Every idea, every voice, and every contribution moves us closer to a world where credit never stands between people and their financial progress. We’re proudly digital-first, giving most Upstarters the flexibility to do their best work from wherever they thrive, alongside teammates across 80+ cities in the US and Canada. Digital-first doesn’t mean distant. We’re intentional about in-person connection through team onsites, planning sessions, and moments that spark creativity and trust. And whether you choose to work primarily from home or collaborate in-person from one of our offices in Columbus, Austin, the Bay Area, or New York City (opening Summer 2026), you’ll have the support to work in the way that works best for you. If you’re energized by tackling meaningful problems, excited to innovate with purpose, and motivated by work that truly matters, we’d love to hear from you. The Team Upstart's Bank Technology team builds the internal platforms, security automation, and operational systems that enable Upstart Bank to operate securely, efficiently, and at scale. The team partners closely with stakeholders across risk, legal, compliance, security, and operations to create software solutions that support the bank's growth as a licensed financial institution. As a Principal Software Engineer, you will provide technical leadership across a growing portfolio of internal platforms and automation systems. You will drive architectural direction, solve complex technical challenges, and establish engineering patterns that enable the team to deliver secure, scalable, and maintainable solutions for the bank's most critical operational functions. How you'll make an impact Lead the architecture, design, and implementation of internal platforms, security automation systems, and workflow tooling that support Upstart Bank operations. Establish scalable engineering patterns, technical standards, and system designs that enable long-term platform growth and maintainability. Partner with stakeholders across risk, compliance, legal, operations, and engineering to translate complex business requirements into durable software solutions. Design and oversee relational data models, authorization systems, integrations, and platform services that support secure and reliable operations. Identify and mitigate technical risks, making thoughtful decisions around system architecture, platform investments, and build-versus-buy tradeoffs. Mentor engineers through technical leadership, architectural reviews, design documentation, and engineering best practices. Drive technical strategy for internal platforms and automation initiatives as the bank expands its operational and regulatory capabilities. Minimum Qualifications Bachelor's degree in Computer Science, Engineering, Mathematics, or a related field (or equivalent practical experience) and 8+ years of software engineering experience. Experience designing, building, and operating large-scale production software systems and web applications. Experience leading architecture and technical design for distributed systems, platform services, or internal software platforms. Experience designing relational database schemas, APIs, integrations, authentication systems, and role-based access control frameworks. Experience partnering with cross-functional stakeholders to deliver software solutions supporting operational, compliance, security, or business-critical workflows. Preferred Qualifications Knowledge of TypeScript, Node.js, Next.js, Prisma, or similar modern application frameworks. Experience building security automation, governance, risk and compliance (GRC) platforms, or operational workflow systems. Familiarity with regulated industries such as financial services, banking, healthcare, or other compliance-driven environments. Knowledge of compliance frameworks, including SOC 2, NIST CSF, or similar regulatory standards. Ability to influence technical strategy, drive alignment across teams, and navigate ambiguous problem spaces with sound engineering judgment. Position Location - This role is available in the following locations: Remote Time Zone Requirements - This team operates on the East/West Coast time zones. Travel Requirements - This team has regular on-site collaboration sessions. These occur X days per Month/Quarter at the Y office. If you need to travel to make these meetups, Upstart will cover all travel related expenses. At Upstart, your base pay is one part of your total compensation package. The anticipated base salary for this position is expected to be within the below range. Your actual base pay will depend on your geographic location–with our “digital first” philosophy, Upstart uses compensation regions that vary depending on location. Individual pay is also determined by job-related skills, experience, and relevant education or training. Your recruiter can share more about the specific salary range for your preferred location during the hiring process. In addition, Upstart provides employees with target bonuses, equity compensation, and generous benefits packages (including medical, dental, vision, and 401k). United States | Remote - Anticipated Base Salary Range $190,600—$263,900 USD What you'll love At Upstart, our benefits are designed to support your health, financial well-being, family, and personal growth. Here’s what you can expect: Competitive compensation, including base pay, bonus opportunities, and annual equity grants that vest quarterly Retirement benefits to help you plan for the future, including a 401(k) or Group Retirement Savings Plan with a company match of $2 for every $1 contributed, up to $15,000 annually (USD in the US, CAD in Canada) Employee Stock Purchase Plan (ESPP) with discounted stock purchase options for eligible employees (US only) Comprehensive health coverage designed to support you and your family, including medical, dental, vision, and wellness resources for US and supplemental health coverage for Canada. Health Savings Account contributions from Upstart for eligible plans (US only) Income protection benefits, including life insurance and disability coverage for added financial security Paid time off, sick leave, and company holidays, in line with local requirements Paid family and parental leave to support caregiving and major life moments (duration varies by country) Family-centered benefits to support fertility, parenthood, and caregiving needs Employee Assistance Program (EAP) offering mental health support and life-centered resources Financial wellness resources, including access to financial planning tools and a financial concierge service (US Only) Annual wellness allowance to support your physical and emotional well-being and personal development, based on what matters most to you Annual productivity allowance to invest in relevant tools and resources you need to do your best work, no matter where you work from Connection and community through team events, all-company updates, and employee resource groups (ERGs) Onsite perks, including catered lunches and fully stocked micro-kitchens when working from one of our offices in the Bay Area, Austin, Columbus, and New York City (opening Summer 2026!) For roles based in Canada, please note that we are not currently able to hire in Quebec. Upstart is a proud Equal Opportunity Employer. Just as we are dedicated to improving access to affordable credit for all, we are committed to inclusive and fair hiring practices. If you require reasonable accommodation in completing an application, interviewing, completing any pre-employment testing, or otherwise participating in the employee selection process, please email candidate_accommodations@upstart.com https://www.upstart.com/candidate_privacy_policy", "summaryDescription" : "Principal Software Engineer at Upstart", "postedDate" : "2026-06-15T23:24:38.501", "createdAt" : "2026-06-15T23:24:38.501", "lastUpdated" : "2026-06-16T05:03:18.154", "ingestTimestamp" : "2026-06-15T23:24:38.501", "mongoId" : "6a305775f292fd229cf39ef1", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "100k-150k", "hasSalary" : false, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Executive", "dataQualityScore" : 0.8888889, "_score" : 1053.9102, "daysOld" : 0, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "FinTech", "llmIndustryConfidence" : 0.98 }, { "id" : "6a305718f292fd229cf33e4a", "title" : "Principal Software Engineer", "company" : "Alarm.com", "salary" : { "min" : 250000.0, "max" : 350000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for Principal Software Engineer in Tysons, United States, adjusted for executive seniority and technology industry." }, "location" : "Tysons, Virginia", "locations" : [ "Tysons", "Virginia" ], "timestamp" : "2026-06-16T07:15:24.761", "fingerprint" : "338af44a7c509d85fdf9dd8c2365c993e8f36b0cccf7dd9d94caaaaa967b9c02", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.greenhouse.io/alarmcom/jobs/8592708002", "externalId" : "8592708002", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Tysons", "state" : "Virginia", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "38.9191272,-77.2229636" } ], "locationText" : "Tysons, Virginia, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "rawDescription" : "Principal Software Engineer — emPower Do you love working with connected devices, automation, and real-world systems? Have you automated your own home, built integrations across smart devices, or thought deeply about how cloud software should control physical systems reliably? Alarm.com is looking for a versatile Principal Software Engineer to help lead architecture and engineering for our emPower team, which builds software for IoT, smart home automation, energy management, HVAC, water, and connected-device control experiences. This role is an IC role that sits at the intersection of cloud services, physical devices, mobile and web applications, automation logic, data processing, and customer-facing product experiences. As a Principal Software Engineer, you will provide hands-on technical leadership across teams. You will help define architecture, guide major design decisions, mentor engineers, and lead the evolution of systems that must be reliable, scalable, maintainable, and adaptable as our connected-device platform continues to grow. Alarm.com combines the product breadth and technical scale of a mature connected-device platform with the collaborative culture of a smaller engineering organization. This role is ideal for someone who wants to work across software, hardware, data, and product domains while helping shape systems used by millions of customers. What You’ll Do As a Principal Software Engineer on the emPower team, you will help design and evolve systems that coordinate physical devices, cloud services, mobile and web applications, automation engines, partner integrations, and data pipelines. You will work across product, firmware, platform, operations, and application engineering teams to turn ambiguous business and technical needs into reliable, scalable, and maintainable software systems. You will be expected to lead through technical depth, sound judgment, and influence. You will own important architecture decisions, guide implementation strategy, and help engineers across multiple teams build better systems. Day-to-Day Responsibilities Provide hands-on technical leadership for systems spanning IoT device control, smart home automation, energy, HVAC, water, and connected-device experiences. Lead architecture and design for major software components, services, APIs, data flows, and integration patterns. Help evolve existing monolithic systems into more modular, scalable, reliable, and maintainable systems. Partner with product, firmware, platform, operations, and application teams to turn ambiguous needs into clear technical direction. Mentor engineers at multiple levels and help raise the technical bar through design reviews, code reviews, technical guidance, and reusable patterns. Drive cross-team collaboration and execution across multiple technical domains. Evaluate new technologies, frameworks, and methodologies where they can materially improve product capabilities or engineering outcomes. Reason across the full product stack, including backend services, databases, APIs, web and mobile experiences, device integrations, automation logic, and operational tooling. Be an expert on system architecture, functionality, data flows, operational processes, and the tools needed to operate production systems effectively. Provide technical thought leadership for major software components, systems, and features, earning alignment and driving adoption across teams. Exercise strong engineering judgment: know when to move quickly, when to invest in a robust platform capability, and when to avoid unnecessary complexity. Bring your ideas. We want our engineers to collaborate on product development, not blindly build to a spec. Other duties as assigned. What You Need Bachelor’s degree in Computer Science, Computer Engineering, a related field, or equivalent professional experience. 15+ years of professional software development experience. Proven experience designing, building, and delivering complex software systems. Strong object-oriented programming skills; experience with C#/.NET or a similar object-oriented language is required; direct C# and .NET experience would be a major plus. Significant database design, performance, and development experience. Experience leading technical direction across teams and influencing architecture beyond a single project or codebase. Experience mentoring engineers and helping develop people, practices, and reusable technical solutions. Ability to select appropriate frameworks, architecture patterns, and technical approaches, then educate teams and drive adoption. Strong analytical skills and a practical problem-solving mindset. Ability to lead and influence across teams without relying solely on reporting authority. Ability to reason across the full product stack, including backend services, data stores, APIs, device integrations, and web/mobile user experiences. Strong understanding of object-oriented design, software development lifecycles, and long-term maintainability concerns. Excellent communication skills, including the ability to explain technical tradeoffs to engineers, product owners, and business stakeholders. Experience That Would Be a Major Plus Experience with IoT, smart home, energy management, HVAC, water, automation, or connected-device systems. Experience working with physical systems, hardware devices, firmware teams, or embedded-device integrations. Experience with event-driven systems, device telemetry, automation/rules engines, or distributed systems. Experience in modernizing monolithic systems or decomposing systems into modular services. Experience designing systems where cloud software interacts with deployed physical devices and must account for latency, reliability, compatibility, and operational visibility. Why This Role Matters The emPower team works on software that connects the digital and physical world: devices, homes, energy systems, water systems, HVAC systems, automation logic, and customer-facing control experiences. The systems we build must be reliable, understandable, scalable, and adaptable as new devices, integrations, and product capabilities are added. As a Principal Software Engineer, you will help shape the architecture behind these experiences. Your work will influence multiple teams, improve the systems engineers build on, and help Alarm.com continue delivering connected-device products that are useful, reliable, and easy for customers to trust. Please note that sponsorship of new applicants for employment authorization, or any other immigration-related support, is not available for this position at this time. WHY WORK FOR ALARM.COM? Collaborate with outstanding people: We hire only the best. Our standards are high and our employees enjoy working alongside other high achievers. Make an immediate impact: New employees can expect to be given real responsibility for bringing new technologies to the marketplace. You are empowered to perform as soon as you join the Alarm.com team! Gain well rounded experience: Alarm.com offers a diverse and dynamic environment where you will get the chance to work directly with executives and develop expertise across multiple areas of the business. Community and Camaraderie: One of our core values is to 'Keep It Fun,' which to us means fostering a strong sense of community. Our culture is built on collaboration and connection, where we celebrate our successes and believe that a positive, engaging environment is key to doing our best work. Alarm.com values working together and collaborating in person. Our employees work from the office 4 days a week. COMPANY INFO Alarm.com is the leading platform for intelligently connected properties. Millions of homeowners and businesses rely on Alarm.com's technology to secure, monitor, and manage their environments from anywhere. Our comprehensive suite of solutions—including security, video surveillance, access control, active shooter detection, intelligent automation, energy management, and wellness—is delivered exclusively through a trusted network of thousands of professional service providers and commercial integrators across North America and worldwide. Alarm.com's common stock is traded on Nasdaq under the ticker symbol ALRM. Alarm.com delivers serious security for serious people. For more information, please visit www.alarm.com. COMPANY BENEFITS Our total rewards package is designed to support you holistically—in your health, your finances, and your life outside of work. The package includes medical plans with company subsidies, a Health Savings Account (HSA) with a company contribution, and a 401(k) with an employer match. We encourage a healthy work-life balance with paid vacation that increases with tenure, paid holidays, wellness time, and paid maternity and bonding leave. To complete the package, we also provide company-paid disability and life insurance, all within a collaborative and casual work environment. Alarm.com is an Equal Opportunity Employer In connection with your application, we collect information that identifies, reasonably relates to or describes you (\"Personal Information\"). The categories of Personal Information that we may collect include your name, government-issued identification number(s), email address, mailing address, other contact information, emergency contact information, employment history, educational history, criminal record, and demographic information. We collect and use those categories of Personal Information about you for human resources and other business management purposes, including identifying and evaluating you as a candidate for potential or future employment or future positions, recordkeeping in relation to recruiting and hiring, conducting criminal background checks as permitted by law, conducting analytics, and ensuring compliance with applicable legal requirements and Company policies. By submitting your application, you acknowledge that we may retain some of the personal data that you provide in your application for our internal operations such as managing our recruitment system and ensuring that we comply with labor laws and regulations even after we have made our employment decision. Notice To Third Party Agencies: Alarm.com understands the value of professional recruiting services. However, we are not accepting resumes from recruiters or employment agencies for this position. In the event we receive a resume or candidate referral for this position from a third-party recruiter or agency without a previously signed agreement, we reserve the right to pursue and hire those candidate(s) without any financial obligation to you. If you are interested in working with Alarm.com, please email your company information and standard agreement to RecruitingPartnerships@Alarm.com.", "summaryDescription" : "Principal Software Engineer at Alarm.com", "postedDate" : "2026-06-15T23:20:02.327", "createdAt" : "2026-06-15T23:20:02.327", "lastUpdated" : "2026-06-16T07:15:24.761", "ingestTimestamp" : "2026-06-15T23:20:02.327", "mongoId" : "6a305718f292fd229cf33e4a", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 250000, "salaryAnnualMax" : 350000, "salaryBand" : "200k+", "hasSalary" : true, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Executive", "dataQualityScore" : 0.8888889, "_score" : 1053.796, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.98 }, { "id" : "6a2cc2b074d8ee00a0a07307", "title" : "Principal Software Engineer", "company" : "Multitude Insights", "industry" : "Engineering", "salary" : { "min" : 7500000.0, "max" : 1.2E7, "currency" : "INR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "The estimation is based on 2024-2025 market data for a Principal Software Engineer in the SaaS industry, with adjustments for executive seniority and remote work, using India as the baseline country." }, "location" : "Remote ", "locations" : [ "Remote " ], "timestamp" : "2026-06-15T12:11:34.838", "fingerprint" : "795fd433db4933e7a93e431271596764fe335da32bb4232fd3e2375af325cdc1", "source" : "ashby", "language" : "en", "applyUrl" : "https://jobs.ashbyhq.com/multitude%20insights/d18bd932-1a34-4a81-8482-d059152535f3/application", "externalId" : "d18bd932-1a34-4a81-8482-d059152535f3", "industryFunction" : { }, "structuredLocations" : [ { "workMode" : "remote" } ], "locationText" : "", "employmentType" : "FULL_TIME", "experienceMinYears" : 10, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "Python, FastAPI, PostgreSQL, OpenSearch, SQL", "professionalSkills" : [ "Systems design", "API design", "SaaS products", "Technical strategy" ], "hardSkillsList" : [ "Backend development", "Distributed systems", "Production infrastructure", "Backend services", "Backend APIs", "Multi-tenancy", "Authentication", "Versioning", "Developer experience", "SQL optimization", "Security design", "Fault tolerance", "Observability" ], "hardSkills" : [ { "name" : "Backend development", "level" : "intermediate" }, { "name" : "Distributed systems", "level" : "intermediate" }, { "name" : "Production infrastructure", "level" : "intermediate" }, { "name" : "Backend services", "level" : "intermediate" }, { "name" : "Backend APIs", "level" : "intermediate" }, { "name" : "Multi-tenancy", "level" : "intermediate" }, { "name" : "Authentication", "level" : "intermediate" }, { "name" : "Versioning", "level" : "intermediate" }, { "name" : "Developer experience", "level" : "intermediate" }, { "name" : "SQL optimization", "level" : "intermediate" }, { "name" : "Security design", "level" : "intermediate" }, { "name" : "Fault tolerance", "level" : "intermediate" }, { "name" : "Observability", "level" : "intermediate" } ], "majorSkills" : "Backend systems, Distributed systems, API design, SaaS architecture", "majorSkillsList" : [ "Backend systems", "Distributed systems", "API design", "SaaS architecture" ], "coreResponsibilities" : "Architect backend systems, Build backend systems, Lead design development, Develop scalable services, Develop production-grade services, Develop APIs, Define engineering best practices, Enforce engineering best practices, Define coding standards, Enforce coding standards, Define architectural patterns, Enforce architectural patterns, Conduct code reviews, Provide technical guidance, Grow culture of craft, Grow continuous improvement, Drive infrastructure evolution, Evolve infrastructure for reliability, Evolve infrastructure for performance, Evolve infrastructure for scalability, Evolve observability, Evolve fault tolerance, Evolve security, Partner with product, Partner with design, Partner with executive leadership, Translate business objectives, Translate into technical strategy", "teamCollaboration" : "Cross-functional leadership; Engineering teams", "domainKnowledge" : "Public safety; AI-powered platform; Real-time platform; SaaS platform; Distributed systems; Multi-tenancy; Fault tolerance; Observability; Security; Cloud infrastructure", "domainList" : [ "public-safety", "ai-powered-platform", "real-time-platform", "saas-platform", "distributed-systems", "multi-tenancy", "fault-tolerance", "observability", "security", "cloud-infrastructure" ], "domainSpecificKnowledge" : [ "Public safety", "AI-powered platform", "Real-time platform", "SaaS platform", "Distributed systems", "Multi-tenancy", "Fault tolerance", "Observability", "Security", "Cloud infrastructure" ], "communicationSkills" : "Make trade-offs legible", "qualificationsBasic" : "10+ years backend development, Senior, staff, or principal-level roles, Backend systems design expertise, Distributed systems expertise, Complex production infrastructure ownership, Scalable backend services development, Backend APIs design, Multi-tenancy design, Authentication design, Versioning design, Developer experience design, SQL proficiency, Security design, Fault tolerance design, Observability design, Technical direction setting", "qualificationsPreferred" : "Startup experience preferred, Mission-critical environment experience preferred, CI/CD pipelines experience a plus, Cloud infrastructure experience a plus, AWS experience a plus", "remoteFriendly" : true, "workSiteFlexibility" : "Remote", "rawDescription" : "ABOUT MULTITUDE INSIGHTS Multitude Insights builds modern tools for public safety agencies. Our flagship product, BLTN, is a real-time, AI-powered bulletin sharing platform that replaces the legacy email workflows police departments have relied on for decades. By enabling officers and analysts to easily create, search, and link bulletins across agencies, we’re turning static documents into actionable intelligence, faster, safer, and more connected. We’re a venture-backed team of engineers, public safety professionals, and veterans working closely with law enforcement customers across the country. Our mission is to give the people who keep us safe the tools they actually need. THE ROLE We’re looking for a Principal Software Engineer to take technical ownership of our backend systems and help shape engineering culture across the organization. This isn’t just a senior IC role, you’ll be at the heart of a mission-critical SaaS platform used by public safety professionals nationwide, setting the architectural direction, mentoring engineers at every level, and working closely with the VP of Engineering and cross-functional leadership to move fast without breaking things. This is a hands-on role with organizational scope, ideal for someone who wants to build and scale real-world systems while investing in the people around them. RESPONSIBILITIES • Architect & Build: Take end-to-end ownership of our backend systems, leading the design and development of scalable, production-grade services and APIs. • Set the Standard: Define and enforce engineering best practices, coding standards, and architectural patterns across the organization. • Lead & Mentor: Conduct code reviews, provide technical guidance, and grow a culture of craft and continuous improvement across engineering teams at all levels. • Own the Platform: Drive the evolution of our infrastructure for reliability, performance, and scalability including observability, fault tolerance, and security. • Collaborate Cross-Functionally: Partner closely with product, design, and executive leadership to translate business objectives into concrete technical strategy. • Deploy & Operate (Bonus): Experience with CI/CD pipelines and cloud infrastructure is a plus, but not a core requirement of the role. QUALIFICATIONS • 10+ years of backend development experience, including significant time in senior, staff, or principal-level roles. • Deep expertise in backend systems design and distributed systems, with a track record of owning complex production infrastructure. • Architect & Build: Lead the development of scalable backend services using Python, FastAPI, PostgreSQL, and OpenSearch. • Proven experience designing and building backend APIs for SaaS products, including multi-tenancy, authentication, versioning, and developer experience. • Strong proficiency in SQL and experience designing for security, fault tolerance, and observability. • Experience setting technical direction at an organizational level, not just within a single team. • Strong communication skills and the ability to make technical trade-offs legible to non-technical stakeholders. • Prior startup or mission-critical environment experience strongly preferred. • Bonus: Hands-on experience with CI/CD pipelines and cloud infrastructure (e.g. AWS) at scale. If you’re looking to lead meaningful technical work and help shape a platform used by real-world operators, we’d love to talk.", "summaryDescription" : "Principal Software Engineer at Multitude Insights. Skills: Backend systems, Distributed systems, API design, SaaS architecture. Architect backend systems. Build backend systems", "createdAt" : "2026-06-14T04:47:17.613", "lastUpdated" : "2026-06-15T12:11:34.838", "ingestTimestamp" : "2026-06-14T04:47:17.613", "mongoId" : "6a2cc2b074d8ee00a0a07307", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "Backend development", "Distributed systems", "Production infrastructure", "Backend services", "Backend APIs", "Multi-tenancy", "Authentication", "Versioning", "Developer experience", "SQL optimization", "Security design", "Fault tolerance", "Observability", "Backend systems", "API design", "SaaS architecture", "Systems design", "SaaS products", "Technical strategy", "Public safety", "AI-powered platform", "Real-time platform", "SaaS platform", "Security", "Cloud infrastructure" ], "skillCount" : 25, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Executive", "dataQualityScore" : 0.8888889, "_score" : 1034.2057, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "SaaS", "llmIndustryConfidence" : 0.98 }, { "id" : "6a2c9ff474d8ee00a09a0ea9", "title" : "Cloud Application Security Engineer", "company" : "Trulioo", "industry" : "Engineering", "salary" : { "min" : 80000.0, "max" : 100000.0, "currency" : "CAD", "frequency" : "Yearly" }, "location" : "Vancouver", "locations" : [ "Vancouver" ], "timestamp" : "2026-06-16T01:13:27.473", "fingerprint" : "450a276986bd182cd720828a4c34c02fc8edefa1bf7c911e19830bdd4308ed62", "source" : "ashby", "language" : "en", "applyUrl" : "https://jobs.ashbyhq.com/trulioo/84ffcdae-09d6-403f-899a-0440c06de24f/application", "externalId" : "84ffcdae-09d6-403f-899a-0440c06de24f", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Vancouver", "state" : "British Columbia", "country" : "Canada", "continent" : "na", "source" : "llm", "workMode" : "hybrid", "geo" : "49.2608724,-123.1139520" } ], "locationText" : "Vancouver, British Columbia, Canada", "employmentType" : "FULL_TIME", "technicalSkills" : "AWS, Kubernetes, CI/CD, Terraform, Docker, Cloud security", "professionalSkills" : [ "System design", "Threat modeling", "Vulnerability management", "Automation" ], "hardSkillsList" : [ "Application security reviews", "Static testing", "Dynamic testing", "Security guardrails", "Container security", "Runtime considerations", "Incident response" ], "hardSkills" : [ { "name" : "Application security reviews", "level" : "intermediate" }, { "name" : "Static testing", "level" : "intermediate" }, { "name" : "Dynamic testing", "level" : "intermediate" }, { "name" : "Security guardrails", "level" : "intermediate" }, { "name" : "Container security", "level" : "intermediate" }, { "name" : "Runtime considerations", "level" : "intermediate" }, { "name" : "Incident response", "level" : "intermediate" } ], "majorSkills" : "Cloud security, Application security, AWS, Kubernetes", "majorSkillsList" : [ "Cloud security", "Application security", "AWS", "Kubernetes" ], "coreResponsibilities" : "Collaborate to design security capabilities, Implement security capabilities, Operate security capabilities, Support application security reviews, Support threat modeling, Support vulnerability management processes, Assist in implementing AWS security guardrails, Assist in maintaining AWS security guardrails, Support Kubernetes security controls, Support container security controls, Contribute to automation of security workflows, Support Infrastructure as Code security practices, Monitor systems for irregular behavior, Improve detection capabilities, Assist in incident response", "teamCollaboration" : "DevOps; Engineering; Stakeholders", "domainKnowledge" : "Cloud application security; Digital identity verification; Cloud infrastructure; Container security; CI/CD security", "domainList" : [ "cloud-application-security", "digital-identity-verification", "cloud-infrastructure", "container-security", "ci-cd-security" ], "domainSpecificKnowledge" : [ "Cloud application security", "Digital identity verification", "Cloud infrastructure", "Container security", "CI/CD security" ], "toolProficiency" : [ "Terraform" ], "continuousLearning" : "Annual education stipend", "problemSolvingSkills" : "Root cause analysis", "specialRequirements" : "On-call escalation coverage", "qualificationsBasic" : "5+ years cloud application security, Experience in AWS, Experience with Kubernetes, Experience with CI/CD security", "qualificationsPreferred" : "Kubernetes experience a plus, CI/CD security experience a plus", "remoteFriendly" : true, "workSiteFlexibility" : "Hybrid", "rawDescription" : "Are you ready to embark on a career that truly affects people around the world? Trulioo invites you to be a catalyst for change in the dynamic realm of digital identity verification. As the global front-runner in our industry, we are redefining how businesses grow, innovate and comply online. Picture yourself at the forefront of innovation, contributing to our award-winning platform that enables organizations worldwide to quickly onboard customers, optimize costs and combat fraud. Fueled by Silicon Valley support, Trulioo stands as the trusted platform that can verify more than 5 billion people and 700 million business entities spanning 195 countries. But Trulioo is more than a tech company. We are a united force of dedicated experts committed to establishing trust online - and we’re proud to be recognized as a BC Top Employer for the second consecutive year, reflecting our commitment to an inclusive, collaborative, and people-first workplace. Headquartered in Vancouver and with strategic hubs in San Diego and Dublin, we foster a culture of collaboration and open communication. Our offices support a hybrid model and staff typically work three days per week at a hub location. Join us where excitement meets innovation and contribute to a world where trust and technology unite. What We Offer - Comprehensive Benefits: We provide a robust benefits package for full-time, permanent employees, including health, dental, and vision coverage, retirement plans with company match, paid time off, parental leave, and an annual education & training stipend (equivalent to $1,000 in local currency). Specific benefits may vary by location and will be discussed further during the interview process. - Flexible Hybrid Working Environment: Our offices are designed to support both collaboration and flexibility. Enjoy weekly lunches, quality coffee, and regular social events. Many locations also feature parent rooms, on-site gyms, comfortable lounges, and adaptable workstations to support your comfort and productivity. - Wellness: We care about your well-being. Team members have access to wellness workshops and events, as well as a complimentary Headspace subscription to help you stay focused, grounded, and energized. - Employee Resource Groups: Belonging is an important part of doing your best work. Our ERGs provide an inclusive space, support and community for employees of diverse backgrounds and allies. We host informative, fun sessions and celebrations that are often open to the entire organization. Position Summary: We are seeking a Cloud Application Security Engineer to join our ISC team and support the continued improvement of the cloud application security posture for Trulioo’s SaaS platform. Reporting to the Senior Director, Technology Infrastructure and Security, you will contribute to securing applications and infrastructure hosted in AWS. This role focuses on supporting scalable, automated security solutions that balance strong protection with developer productivity. This is a hands-on role within a 24/7 environment that includes participation in on-call escalation coverage for security incidents. This role is ideal for someone looking to deepen their experience in cloud, Kubernetes, and CI/CD security within a collaborative engineering environment. This will be a full-time, permanent position working out of the Vancouver office on a hybrid model (3 days per week in the office). What You'll Be Doing: You will be a key resource within the Trulioo security team, supporting security capabilities across our cloud platform and application environment. The ideal candidate is a self-starter with strong experience in cloud and platform security, and a focus on building scalable, automated security solutions in AWS. - Collaborate with DevOps, Engineering, and other stakeholders to design, implement, and operate cloud and application security capabilities across CI/CD pipelines and production environments - Support application security reviews and threat modeling, including code review, static and dynamic testing - Support vulnerability management processes across application and infrastructure layers, including CI/CD-integrated workflows - Assist in implementing and maintaining AWS security guardrails, ensuring services are properly configured with effective monitoring, visibility, and alerting - Support Kubernetes and container security controls, including configuration standards, access controls, and runtime considerations - Contribute to automation of security workflows to reduce manual effort and improve response times - Support Infrastructure as Code (IaC) security practices, including Terraform-based deployments - Monitor systems for irregular behavior, improve detection capabilities, and assist in incident response and investigation - Support reporting and continuous improvement of security controls and operational security processes - Support the evaluation and adoption of AI-assisted security and operational workflows - Work closely with senior engineers and cross-functional teams to support secure platform operations and continuous improvement initiatives You Will Bring: - 2-5 years of experience in cloud, application, or platform security, with demonstrated depth in AWS and modern cloud-native environments - Bachelor’s degree in computer science, engineering, or equivalent experience - Experience working with cloud security technologies, preferably AWS, including implementation of security controls and guardrails - Experience securing containerized environments and Kubernetes platforms (RBAC, network policies, workload security), including implementing controls in production environments - Experience implementing security controls within CI/CD pipelines and supporting developer workflows - Experience with vulnerability management across application and infrastructure layers, including prioritization and remediation workflows - Hands-on experience with AWS security services such as SecurityHub, GuardDuty, IAM, Config, Control Tower, CloudWatch, and related tooling - Experience working within DevSecOps environments and CI/CD workflows, ideally in AWS-based infrastructure (bonus points for AWS certifications) - Strong scripting and automation experience (Python, Terraform, or similar), with a focus on reducing manual operational work - Experience with monitoring and logging platforms (e.g., Sumo Logic or equivalent) - Knowledge of security frameworks and standards (e.g., OWASP Top 10, ISO 27001, SOC 2) - Strong technical background in Linux and cloud-based systems - Ability to manage competing priorities and operate effectively within a collaborative team environment - Strong problem-solving and critical thinking skills, with a focus on practical, scalable solutions - Excellent communication and collaboration skills across engineering and security teams Thriving at Trulioo At Trulioo, you’re not just an employee. You’re a valued member of our Trulicrew on a journey of professional and personal growth with a world-class organization. With Trulioo, you have the power to revolutionize the intersection of technology, digital trust and online identity to open the global economy to everyone. Together, we can shape the digital future. We’re on the lookout for exceptional people to empower with trust, autonomy and the freedom to cultivate their potential. Your curiosity, meticulous attention to detail and passion to contribute are highly valued. If that resonates with you, apply today to become a part of our team. Join us in shaping a future where your career isn’t just a journey but also a boundless exploration into the possibilities of technology and digital identity verification. Get an inside look at life at Trulioo by following us on LinkedIn https://ca.linkedin.com/company/trulioo, or learn more about us at www.trulioo.com http://www.trulioo.com If you don’t see yourself fully reflected in every job requirement listed on the posting above, we still encourage you to reach out and apply. Research has shown that minorities and underrepresented groups often only apply when they feel 100% qualified. We are committed to creating a more equitable, inclusive and diverse company and we strongly encourage applicants of all genders, ages, ethnicities, cultures, abilities, sexual orientations, and life experiences to apply. Trulioo welcomes applications from people with disabilities. Support is available upon request for candidates taking part in all aspects of the selection process. Finally, we know from time-to-time emergencies happen and you may need to reschedule an interview - we understand and encourage you to be in communication without worrying about losing the opportunity or your credibility. Privacy Notice As part of our job application process, Trulioo collects, processes, and discloses personal data for the purpose of identifying suitable candidates for our job openings. For more detail, please visit Trulioo’s Website Privacy Policy https://www.trulioo.com/website-privacy-policy in the section “When you apply for a job”.", "summaryDescription" : "Cloud Application Security Engineer at Trulioo. Skills: Cloud security, Application security, AWS, Kubernetes. Collaborate to design security capabilities. Implement security capabilities", "createdAt" : "2026-06-14T18:14:12.400", "lastUpdated" : "2026-06-16T01:13:27.473", "ingestTimestamp" : "2026-06-14T18:14:12.400", "mongoId" : "6a2c9ff474d8ee00a09a0ea9", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "75k-100k", "hasSalary" : false, "allSkills" : [ "Application security reviews", "Static testing", "Dynamic testing", "Security guardrails", "Container security", "Runtime considerations", "Incident response", "Cloud security", "Application security", "AWS", "Kubernetes", "System design", "Threat modeling", "Vulnerability management", "Automation", "Cloud application security", "Digital identity verification", "Cloud infrastructure", "CI/CD security", "Terraform" ], "skillCount" : 20, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Mid", "dataQualityScore" : 0.7777778, "_score" : 1029.779, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.97 }, { "id" : "6a30517ef292fd229cf01491", "title" : "Principal Software Engineer (AI)", "company" : "Future Secure AI", "industry" : "Technology", "salary" : { "min" : 7500000.0, "max" : 1.2E7, "currency" : "INR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "The estimation is based on the market baseline for a Principal Software Engineer (AI) in the Technology industry, adjusted for executive seniority and senior experience in a major APAC city." }, "location" : "APAC", "locations" : [ "APAC" ], "timestamp" : "2026-06-16T09:04:28.743", "fingerprint" : "6980be7358504035b1224e4571d5908af0b17c2cf40be7f72536fb4d422c4cf8", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.anz.greenhouse.io/futuresecureai/jobs/4004212201", "externalId" : "4004212201", "industryFunction" : { }, "structuredLocations" : [ { "continent" : "as", "workMode" : "onsite" } ], "locationText" : "", "employmentType" : "FULL_TIME", "experienceMinYears" : 10, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "Node.js, TypeScript, AI frameworks, LLMs", "professionalSkills" : [ "Technical leadership", "Architectural decisions", "System design" ], "hardSkillsList" : [ "AI development", "System architecture", "Data governance", "Security design" ], "softSkillsList" : [ "Courage", "Rigor" ], "hardSkills" : [ { "name" : "AI development", "level" : "intermediate" }, { "name" : "System architecture", "level" : "intermediate" }, { "name" : "Data governance", "level" : "intermediate" }, { "name" : "Security design", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Courage" }, { "name" : "Rigor" } ], "majorSkills" : "AI, Software architecture, Enterprise AI", "majorSkillsList" : [ "AI", "Software architecture", "Enterprise AI" ], "coreResponsibilities" : "Shape architectural decisions, Provide technical leadership, Design human-in-the-loop systems, Set technical standards, Set technical patterns, Bring novel approaches, Integrate LLMs, Integrate AI frameworks, Work with customers, Understand customer needs, Ensure solutions exceed expectations", "teamCollaboration" : "Across squads; Across projects; Across product; With engineering teams; With customer delivery teams", "domainKnowledge" : "Enterprise AI; AI Co-Worker systems; Persona-based AI; Operational workflows; Mission-critical environments; Model-agnostic platform; Deterministic systems; Non-deterministic systems; Production AI products", "domainList" : [ "enterprise-ai", "ai-co-worker-systems", "persona-based-ai", "operational-workflows", "mission-critical-environments", "model-agnostic-platform", "deterministic-systems", "non-deterministic-systems", "production-ai-products" ], "domainSpecificKnowledge" : [ "Enterprise AI", "AI Co-Worker systems", "Persona-based AI", "Operational workflows", "Mission-critical environments", "Model-agnostic platform", "Deterministic systems", "Non-deterministic systems", "Production AI products" ], "toolProficiency" : [ "LangChain", "LangGraph" ], "communicationSkills" : "Align stakeholders", "innovationCreativity" : "Novel approaches", "problemSolvingSkills" : "Problem-solving instincts", "outcomesObjectives" : "Raise organizational performance; Transform the world", "qualificationsBasic" : "10+ years software development experience, Deep hands-on AI work, Coding fundamentals, Node.js experience, TypeScript experience, Experience building secure systems, Experience with data governance, Track record shaping architectural decisions, Track record defending architectural decisions", "qualificationsPreferred" : "Experience with LangChain, Experience with LangGraph", "rawDescription" : "About the Company At Future Secure AI, we're building something genuinely new — and we're looking for people bold enough to build it with us. We work at the frontier of AI, tackling big, real-world problems for global enterprises across multiple industries, armed with state-of-the-art technology and a culture that prizes courage, rigor, and relentless curiosity. Our BRAVER values aren't just words on a wall — they describe the kind of people we are and the standard we hold ourselves to every day. Our leadership team is entrepreneurial, experienced, and accessible, with an open-door policy that means you'll never be just a number here. We invest seriously in your growth because we know our success depends on yours. If you're ready to work alongside some of the brightest minds in the industry, push into uncharted territory, and do work that genuinely matters, Future Secure AI is the place for you. Future Secure AI (FSAI) is a leading enterprise AI company that was created in deep partnership with one of the world's largest financial institutions. Operating as an enterprise company with deep relationships at C-suite with large global enterprises, FSAI believes humans and AI Workers will collaborate seamlessly to raise organisational performance. FSAI has dozens of partnerships with leading companies in most industries and regions globally. FSAI has a strategic focus on expanding globally as we continue our extraordinary journey to transform the world with the most cutting-edge artificial intelligence We're hiring a Principal Software Engineer (AI) to help set the technical direction of our products and platform. You'll provide technical leadership across squads, projects, and product, shaping architectural decisions and working closely with engineering and customer delivery teams. If you do your best work when the problem is ambiguous and the stakes are high, you'll fit here. What you'll be doing Shaping architectural decisions for our AI Co-Worker systems, enabling enterprise customers to deploy persona-based AI Co-Workers that perform complex, end-to-end operational workflows through their own secure platform. Designing human-in-the-loop systems that keep humans in control of AI Co-Workers operating in mission-critical environments. Setting the technical standards and patterns other engineers will build on. Bringing novel approaches to how deterministic and non-deterministic systems are combined in production AI products. Ensuring our platform remains model-agnostic, integrating LLMs and AI frameworks from both established and emerging vendors. Working closely with customers to deeply understand their needs and make sure solutions exceed their expectations. Your application should demonstrate 10+ years of software development experience, with deep hands-on AI work. Strong Coding fundamentals, we primarily use Node.js and typescript Experience with AI frameworks and orchestration tools such as LangChain or LangGraph. Experience building systems where security and data governance are first-class design constraints, not afterthoughts. A track record of shaping and defending architectural decisions in complex, production environments. The communication skills to align technical and non-technical stakeholders around hard trade-offs. Sharp problem-solving instincts and the follow-through to match. Why join us You'll have genuine influence over the technical direction of a fast-growing AI product company, technical leadership across the full breadth of our product, and a direct line into senior leadership. Future Secure AI Privacy Policy At Future Secure AI, we are committed to protecting your privacy and adhering to the principles of the General Data Protection Regulation (GDPR) and the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth). Our Privacy Policy outlines how we collect, use, share, and protect your personal data when you visit our website at www.futuresecure.ai (the \"Website\") and use our services.", "summaryDescription" : "Principal Software Engineer (AI) at Future Secure AI. Skills: AI, Software architecture, Enterprise AI. Shape architectural decisions. Provide technical leadership", "postedDate" : "2026-06-15T23:17:02.145", "createdAt" : "2026-06-15T23:17:02.145", "lastUpdated" : "2026-06-16T09:04:28.743", "ingestTimestamp" : "2026-06-15T23:17:02.145", "mongoId" : "6a30517ef292fd229cf01491", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "AI development", "System architecture", "Data governance", "Security design", "Courage", "Rigor", "AI", "Software architecture", "Enterprise AI", "Technical leadership", "Architectural decisions", "System design", "AI Co-Worker systems", "Persona-based AI", "Operational workflows", "Mission-critical environments", "Model-agnostic platform", "Deterministic systems", "Non-deterministic systems", "Production AI products", "LangChain", "LangGraph" ], "skillCount" : 22, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Executive", "dataQualityScore" : 1.0, "_score" : 1029.4641, "daysOld" : 0, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.98 }, { "id" : "6a306e31f292fd229cfdd344", "title" : "Principal Software Engineer", "company" : "UiPath", "industry" : "Engineering", "salary" : { "min" : 240000.0, "max" : 360000.0, "currency" : "EUR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Principal Software Engineer in Bucharest, Romania, adjusted for seniority, industry, and company size." }, "location" : "Bucharest", "locations" : [ "Bucharest" ], "timestamp" : "2026-06-16T13:34:55.452", "fingerprint" : "2f00d3bca1f89cc2c373ff3d8b846903118da661af7d4c6bb19be9dceb9b7fda", "source" : "ashby", "language" : "en", "applyUrl" : "https://jobs.ashbyhq.com/uipath/2be81aae-0e50-446c-90b3-a304659588c3/application", "externalId" : "2be81aae-0e50-446c-90b3-a304659588c3", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Bucharest", "country" : "Romania", "continent" : "eu", "source" : "llm", "workMode" : "onsite", "geo" : "44.4361414,26.1026840" } ], "locationText" : "Bucharest, Romania", "employmentType" : "FULL_TIME", "experienceMinYears" : 7, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "C#, Java, Python, Go, Distributed systems, Microservices, APIs, Cloud-native architectures, Azure, AWS, GCP, Containers, Kubernetes, CI/CD, Monitoring, Logging, Observability, Relational databases, NoSQL databases, Messaging systems, Event-driven architectures, Data processing", "professionalSkills" : [ "System design", "Architecture decisions", "Technical planning", "Roadmap input", "Scalability challenges", "Reliability challenges", "Security challenges", "Performance challenges", "Cost challenges", "Sustainable solutions", "System design standards", "Code quality standards", "Testing standards", "Observability standards", "Automation standards", "Incident management standards", "Engineering excellence standards", "Design reviews", "Technical discussions", "Technical feedback" ], "hardSkillsList" : [ "Data structures", "Algorithms", "Multithreading", "Asynchronous programming", "Performance optimization" ], "softSkillsList" : [ "Leadership" ], "hardSkills" : [ { "name" : "Data structures", "level" : "intermediate" }, { "name" : "Algorithms", "level" : "intermediate" }, { "name" : "Multithreading", "level" : "intermediate" }, { "name" : "Asynchronous programming", "level" : "intermediate" }, { "name" : "Performance optimization", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" } ], "majorSkills" : "Cloud services, Distributed systems, Architecture", "majorSkillsList" : [ "Cloud services", "Distributed systems", "Architecture" ], "coreResponsibilities" : "Define technical strategy for cloud services, Evolve technical strategy for cloud services, Lead architecture for backend systems, Lead architecture for distributed systems, Lead design for backend systems, Lead design for distributed systems, Help teams make technical tradeoffs, Set engineering standards, Support UiPath's growth, Lead architecture of cloud-native services, Lead technical direction of cloud-native services, Design scalable distributed systems, Design secure distributed systems, Design reliable distributed systems, Design high-performing distributed systems, Design systems across cloud environments, Design systems across on-premises environments, Design systems across hybrid environments, Partner with engineering leaders, Partner with architects, Partner with product managers, Partner with cross-functional teams, Shape technical solutions, Drive technical planning, Drive roadmap input, Identify scalability challenges, Identify reliability challenges, Identify security challenges, Identify performance challenges, Identify cost challenges, Lead design of sustainable solutions, Set high standards for system design, Set high standards for code quality, Set high standards for testing, Set high standards for observability, Set high standards for automation, Set high standards for incident management, Set high standards for engineering excellence, Mentor engineers, Guide engineers through design reviews, Guide engineers through technical discussions, Guide engineers through architecture decisions, Provide hands-on technical feedback", "teamCollaboration" : "Cross-functional teams; Engineering leaders; Architects; Product managers", "projectManagementSkills" : [ "Roadmap input" ], "domainKnowledge" : "Cloud services; Distributed systems; Cloud-native architectures; Automation; AI; Developer platforms; Enterprise software; Large-scale cloud systems", "domainList" : [ "cloud-services", "distributed-systems", "cloud-native-architectures", "automation", "ai", "developer-platforms", "enterprise-software", "large-scale-cloud-systems" ], "domainSpecificKnowledge" : [ "Cloud services", "Distributed systems", "Cloud-native architectures", "Automation", "AI", "Developer platforms", "Enterprise software", "Large-scale cloud systems" ], "toolProficiency" : [ "Kubernetes", "CI/CD", "Monitoring", "Logging", "Observability" ], "communicationSkills" : "Technical feedback", "problemSolvingSkills" : "Technical tradeoffs; Ambiguity; Dependencies", "qualificationsBasic" : "7+ years software engineering experience, Backend development experience, Cloud development experience, Hands-on experience with C#, Java, Python, or Go, Experience designing distributed systems, Experience building microservices, Experience building APIs, Experience building cloud-native architectures, Proven ability to influence technical direction, Proven ability to drive architecture decisions, Experience building production-grade services in Azure, AWS, or GCP, Good knowledge of containers, Good knowledge of Kubernetes, Good knowledge of CI/CD, Good knowledge of monitoring, Good knowledge of logging, Good knowledge of observability, Good knowledge of production operations, Understanding of system design, Understanding of data structures, Understanding of algorithms, Understanding of multithreading, Understanding of asynchronous programming, Understanding of performance optimization, Experience with relational databases, Experience with NoSQL databases, Experience with messaging systems, Experience with event-driven architectures, Experience with high-scale data processing, Ability to balance customer experience, Ability to balance reliability, Ability to balance security, Ability to balance scalability, Ability to balance cloud cost, Technical leadership skills, Ownership skills, Communication skills", "qualificationsPreferred" : "Interest in automation, Interest in AI, Interest in developer platforms, Interest in enterprise software, Interest in large-scale cloud systems", "remoteFriendly" : true, "workSiteFlexibility" : "Flexible", "rawDescription" : "LIFE AT UIPATH The people at UiPath believe in the transformative power of automation to change how the world works. We’re committed to creating category-leading enterprise software that unleashes that power. To make that happen, we need people who are curious, self-propelled, generous, and genuine. People who love being part of a fast-moving, fast-thinking growth company. And people who care—about each other, about UiPath, and about our larger purpose. Could that be you? YOUR MISSION As a Principal Software Engineer, you will help define and evolve the technical strategy for cloud services that power critical automation capabilities across the UiPath platform. You will lead architecture and design across complex backend and distributed systems, often working through ambiguity, dependencies, and cross-team impact. You will help teams make the right technical tradeoffs across scalability, reliability, security, customer experience, operational excellence, and cloud cost, while setting engineering standards that support UiPath’s current and future growth. WHAT YOU'LL DO AT UIPATH - Lead the architecture and technical direction of complex backend and cloud-native services across the UiPath platform. - Design scalable, secure, reliable, and high-performing distributed systems across cloud, on-premises, and hybrid environments. - Partner with engineering leaders, architects, product managers, and cross-functional teams to shape technical solutions for high-impact product and platform areas. - Drive technical planning and roadmap input for complex services, platform capabilities, or cross-team initiatives. - Identify long-term scalability, reliability, security, performance, and cost challenges, and lead the design of sustainable solutions. - Set high standards for system design, code quality, testing, observability, automation, incident management, and engineering excellence. - Mentor and guide engineers through design reviews, technical discussions, architecture decisions, and hands-on technical feedback. WHAT YOU'LL BRING TO THE TEAM - 7+ years of software engineering experience, with strong backend and cloud development experience. - Hands-on experience with one or more modern programming languages such as C#, Java, Python, or Go. - Strong experience designing and building distributed systems, microservices, APIs, and cloud-native architectures. - Proven ability to influence technical direction and drive architecture decisions across teams. - Experience building and operating production-grade services in cloud environments such as Azure, AWS, or GCP. - Good knowledge of containers, Kubernetes, CI/CD, monitoring, logging, observability, and production operations. - Strong understanding of system design, data structures, algorithms, multithreading, asynchronous programming, and performance optimization. - Experience with relational and/or NoSQL databases, messaging systems, event-driven architectures, or high-scale data processing. - Ability to balance customer experience, reliability, security, scalability, and cloud cost when making technical decisions. - Strong technical leadership, ownership, and communication skills, with the ability to guide teams through ambiguity. - Interest in automation, AI, developer platforms, enterprise software, or large-scale cloud systems is a plus. Maybe you don’t tick all the boxes above—but still think you’d be great for the job? Go ahead, apply anyway. Please. Because we know that experience comes in all shapes and sizes—and passion can’t be learned. Many of our roles allow for flexibility in when and where work gets done. Depending on the needs of the business and the role, the number of hybrid, office-based, and remote workers will vary from team to team. Applications are assessed on a rolling basis and there is no fixed deadline for this requisition. The application window may change depending on the volume of applications received or may close immediately if a qualified candidate is selected. We value a range of diverse backgrounds, experiences and ideas. We pride ourselves on our diversity and inclusive workplace that provides equal opportunities to all persons regardless of age, race, color, religion, sex, sexual orientation, gender identity, and expression, national origin, disability, neurodiversity, military and/or veteran status, or any other protected classes. Additionally, UiPath provides reasonable accommodations for candidates on request and respects applicants' privacy rights. To review these and other legal disclosures, visit our privacy policy https://www.uipath.com/legal/trust-and-security/privacy-policy.", "summaryDescription" : "Principal Software Engineer at UiPath. Skills: Cloud services, Distributed systems, Architecture. Define technical strategy for cloud services. Evolve technical strategy for cloud services", "createdAt" : "2026-06-16T00:26:10.940", "lastUpdated" : "2026-06-16T13:34:55.452", "ingestTimestamp" : "2026-06-16T00:26:10.940", "mongoId" : "6a306e31f292fd229cfdd344", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "Data structures", "Algorithms", "Multithreading", "Asynchronous programming", "Performance optimization", "Leadership", "Cloud services", "Distributed systems", "Architecture", "System design", "Architecture decisions", "Technical planning", "Roadmap input", "Scalability challenges", "Reliability challenges", "Security challenges", "Performance challenges", "Cost challenges", "Sustainable solutions", "System design standards", "Code quality standards", "Testing standards", "Observability standards", "Automation standards", "Incident management standards", "Engineering excellence standards", "Design reviews", "Technical discussions", "Technical feedback", "Cloud-native architectures", "Automation", "AI", "Developer platforms", "Enterprise software", "Large-scale cloud systems", "Kubernetes", "CI/CD", "Monitoring", "Logging", "Observability" ], "skillCount" : 40, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Lead", "dataQualityScore" : 0.8888889, "_score" : 1026.1908, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.98 }, { "id" : "6a2c95e974d8ee00a098e2f1", "title" : "Senior Application Security Engineer", "company" : "Apollo. io", "industry" : "SaaS", "salary" : { "min" : 190000.0, "max" : 273000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "United States", "locations" : [ "United States" ], "timestamp" : "2026-06-15T10:02:56.077", "fingerprint" : "7eee11ebb0b5d554a962a8905ff3967ddb3c08481edac878d6dd9c335dee768d", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.greenhouse.io/apolloio/jobs/6020809004", "externalId" : "6020809004", "industryFunction" : { }, "structuredLocations" : [ { "country" : "United States", "continent" : "na", "workMode" : "remote" } ], "locationText" : "United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "Application security, AI, SAST, SCA, OAuth, CSRF, SSRF, Cryptography, API", "professionalSkills" : [ "Code analysis", "Risk assessment", "Security architecture", "Vulnerability management", "Offensive security", "Exploit development", "Adversarial thinking", "Red-team exercises", "Severity decisions", "Workflow enrichment", "AI security", "Secure coding", "Remediation guidance" ], "hardSkillsList" : [ "Threat modeling", "Code reviews", "Penetration testing", "Dependency analysis", "Runtime analysis", "Input handling", "Output handling", "Prompt engineering" ], "hardSkills" : [ { "name" : "Threat modeling", "level" : "intermediate" }, { "name" : "Code reviews", "level" : "intermediate" }, { "name" : "Penetration testing", "level" : "intermediate" }, { "name" : "Dependency analysis", "level" : "intermediate" }, { "name" : "Runtime analysis", "level" : "intermediate" }, { "name" : "Input handling", "level" : "intermediate" }, { "name" : "Output handling", "level" : "intermediate" }, { "name" : "Prompt engineering", "level" : "intermediate" } ], "majorSkills" : "Application security, Secure SDLC, Threat modeling, Vulnerability management", "majorSkillsList" : [ "Application security", "Secure SDLC", "Threat modeling", "Vulnerability management" ], "coreResponsibilities" : "Own secure SDLC, Improve secure SDLC, Embed security into design, Embed security into implementation, Embed security into deployment, Perform security reviews, Perform threat modeling, Analyze code, Provide security architecture guidance, Define security guardrails, Maintain risk models, Drive vulnerability management, Validate findings, Prioritize findings, Route findings, Track remediation, Verify remediations, Implement fixes, Support remediation, Perform offensive testing, Test applications, Test fixes, Apply severity decisions, Configure AppSec tooling, Improve AppSec tooling, Select security tooling, Build security tooling, Refine security tooling, Build automations, Refine workflow enrichments, Use AI to automate, Use AI to transform, Use AI to scale, Embed AI security checks, Partner on AI security requirements, Partner on AI security controls, Support security enablement, Scale security enablement, Provide remediation guidance, Provide secure patterns, Provide secure examples", "teamCollaboration" : "Cross-functional partnership; Engineering teams; Product teams; IT teams; Security champions", "domainKnowledge" : "Modern SaaS environments; AI-powered features; AI systems", "domainList" : [ "modern-saas-environments", "ai-powered-features", "ai-systems" ], "domainSpecificKnowledge" : [ "Modern SaaS environments", "AI-powered features", "AI systems" ], "toolProficiency" : [ "SAST tooling", "Bug bounty", "SCA tooling" ], "continuousLearning" : "Continuous improvement", "innovationCreativity" : "AI and automation", "problemSolvingSkills" : "Root cause analysis; Sound judgment", "qualificationsBasic" : "Senior individual contributor, Semi-annual or annual goals, Solve ambiguous problems, Improve operational processes, Drive cross-team collaboration", "qualificationsPreferred" : "L6 senior-IC level", "remoteFriendly" : true, "rawDescription" : "Apollo.io is the leading go-to-market solution for revenue teams, trusted by over 500,000 companies and millions of users globally, from rapidly growing startups to some of the world's largest enterprises. Founded in 2015, the company is one of the fastest growing companies in SaaS, raising approximately $250 million to date and valued at $1.6 billion. Apollo.io provides sales and marketing teams with easy access to verified contact data for over 210 million B2B contacts and 35 million companies worldwide, along with tools to engage and convert these contacts in one unified platform. By helping revenue professionals find the most accurate contact information and automating the outreach process, Apollo.io turns prospects into customers. Apollo raised a series D in 2023 and is backed by top-tier investors, including Sequoia Capital, Bain Capital Ventures, and more, and counts the former President and COO of Hubspot, JD Sherman, among its board members. Role Overview The Senior Application Security Engineer II is a senior individual contributor responsible for strengthening Apollo’s secure software development lifecycle and reducing application risk across product, platform, and AI-powered features. This role blends deep code-level application security work with strong cross-functional partnership. It includes application security reviews, threat modeling, AppSec tooling, findings triage and remediation follow-through, external testing intake, and developer enablement. This role is calibrated at the L6 senior-IC level: owning semi-annual or annual goals, solving ambiguous problems with sound judgment, improving operational processes, and driving meaningful cross-team collaboration and influence. Key Responsibilities Secure SDLC, design review, and threat modeling Own and continuously improve the secure software development lifecycle for Apollo applications so security is embedded into design, implementation, and deployment. Perform application security reviews, threat modeling, and deep code-level analysis for high-impact product, platform, and AI features before launch. Provide practical security architecture guidance to Engineering, Product, and IT teams. Help define and maintain application-security guardrails, secure design expectations, code review standards, and risk models for new and existing systems. Vulnerability management and hands-on remediation Drive execution-heavy vulnerability management across internal reviews, bug bounty, pentests, SCA/runtime findings, and other research signals, ensuring findings are validated, prioritized, routed clearly, and tracked through remediation and verification within SLAs. Go beyond identifying issues: read the code, explain root cause, propose the safest fix, and directly implement or support remediation when needed for complex vulnerabilities. Perform hands-on validation and offensive security testing of applications and fixes, including exploit development, bypass testing, adversarial thinking, and focused red-team-style exercises, to confirm remediations address the underlying issue rather than only the initial symptom. Work across the kinds of application security issues common in modern SaaS environments, including authentication and authorization weaknesses, access control risks, OAuth and CSRF design flaws, SSRF, cryptographic and verification issues, information disclosure and data exposure risks, unsafe execution and deserialization patterns, and dependency or runtime vulnerabilities. Apply clear, risk-based severity decisions using exploitability, data sensitivity, customer impact, and blast radius. Tooling, automation, and AI Configure and improve AppSec tooling and integrations, including SAST configuration, ignore lists, dashboards, and other controls that maintain useful coverage without excessive noise. Select, build, or refine security tooling, small automations, and workflow enrichments that reduce manual effort and scale AppSec operations responsibly. Use AI to automate, transform, and scale security and engineering-adjacent processes where it materially improves speed, consistency, or signal quality, while still validating outputs with strong engineering judgment. Embed AI-specific security checks into SSDLC reviews and code analysis, including input and output handling, AI-exposed APIs, prompt and response guardrails, and abuse or data-exfiltration paths. Partner cross-functionally on AI security requirements and controls so AI systems and AI-powered features are designed, deployed, and operated securely. Engineering enablement and partnership Support and scale security enablement for engineers and security champions, including secure coding, AppSec, and AI-safety content. Provide actionable remediation guidance, secure patterns, and examples that help engineering teams fix issues quickly and correctly. Partner closely with Engineering, Product, Platform, Data, Legal, and other security teams to keep AppSec priorities aligned with business risk and product velocity. Produce clear documentation, metrics, and written narratives that improve AppSec visibility, observability, and decision-making. What Good Looks Like at L6 Owns meaningful AppSec goals over a semi-annual or annual horizon and independently identifies the right solutions to ambiguous, open-ended problems. Drives cross-team collaboration and operational improvements beyond isolated tickets or one-off reviews. Makes informed decisions by balancing technical detail, business context, customer trust, and long-term risk. Sets a high bar for ownership, communication, mentoring, and technical judgment, and helps raise the effectiveness of peers and partner teams. Required Skills Ruby experience is highly valuable, and Python or similar scripting ability is a plus. Strong Linux and cloud fundamentals, ideally with experience in GCP-backed environments. Deep familiarity with common AppSec issues, secure design, secure authentication and authorization patterns, vulnerability management, and developer security tooling. Demonstrated ability to perform deep code review, penetration testing, and exploit-oriented validation, and to either fix vulnerabilities directly or work closely with engineers to land durable remediations that hold up against bypass attempts and variant analysis. Experience handling findings from bug bounty, pentests, internal reviews, or automated security tooling through closure and verification. Experience using AI-assisted tools, automations, APIs, or structured workflows to improve engineering or security processes at scale. Experience securing AI-powered systems or features, including AI API exposure, prompt and response handling, data protection, misuse scenarios, and monitoring expectations. Strong written and verbal communication, stakeholder management, and influencing skills across technical and non-technical partners. Preferred Qualifications Experience supporting or leading security reviews for AI-native products, internal agents, or AI-assisted engineering workflows. Experience improving secure-by-design practices and AppSec observability in a fast-moving engineering organization. Experience with security training, developer enablement, or security champions programs. Relevant security certifications are a plus. Example Success Outcomes Improve the health and flow of AppSec findings by keeping prioritization, remediation, and verification moving within defined SLAs. Complete recurring application reviews or threat models for important systems and features. Increase engineering adoption of secure patterns, AppSec tooling, and security training. Reduce manual toil and improve AppSec signal quality through targeted automation and responsible use of AI-assisted workflows. The listed Pay Range reflects the total cash compensation inclusive of annual base salary and annual bonus as applicable. For sales roles, the range provided is the role’s On Target Earnings (\"OTE\") range, meaning that the range includes both the sales commissions/sales bonus target and annual base salary for the role. This salary range may be inclusive of several career levels at Apollo and will be narrowed during the interview process based on a number of factors, including the candidate’s experience, qualifications, and location. Applicants interested in this role who are not located in the US may request the annual salary range for their location during the interview process. Additional benefits for this role may include: equity; company bonus or sales commissions/bonuses; 401(k) plan; at least 10 paid holidays per year, flex PTO, and parental leave; employee assistance program and wellbeing benefits; global travel coverage; life/AD FSA/HSA and medical, dental, and vision benefits. Tier 1 Pay Range (San Francisco, New York City, Seattle) $218,000—$273,000 USD Tier 2 Pay Range (All other US Locations) $190,000—$237,000 USD We are AI Native Apollo.io is an AI-native company built on a culture of continuous improvement. We’re on the front lines of driving productivity for our customers—and we expect the same mindset from our team. If you're energized by finding smarter, faster ways to get things done using AI and automation, you'll thrive here. Why You’ll Love Working at Apollo At Apollo, we’re driven by a shared mission: to help our customers unlock their full revenue potential. That’s why we take extreme ownership of our work, move with focus and urgency, and learn voraciously to stay ahead. We invest deeply in your growth, ensuring you have the resources, support, and autonomy to own your role and make a real impact. Collaboration is at our core—we’re all for one, meaning you’ll have a team across departments ready to help you succeed. We encourage bold ideas and courageous action, giving you the freedom to experiment, take smart risks, and drive big wins. If you’re looking for a place where your work matters, where you can push boundaries, and where your career can thrive—Apollo is the place for you. Learn more here!", "summaryDescription" : "Senior Application Security Engineer at Apollo. io. Skills: Application security, Secure SDLC, Threat modeling, Vulnerability management. Own secure SDLC. Improve secure SDLC", "postedDate" : "2026-06-14T08:50:18.480", "createdAt" : "2026-06-14T08:50:18.480", "lastUpdated" : "2026-06-15T10:02:56.077", "ingestTimestamp" : "2026-06-14T08:50:18.480", "mongoId" : "6a2c95e974d8ee00a098e2f1", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 190000, "salaryAnnualMax" : 273000, "salaryBand" : "150k-200k", "hasSalary" : true, "allSkills" : [ "Threat modeling", "Code reviews", "Penetration testing", "Dependency analysis", "Runtime analysis", "Input handling", "Output handling", "Prompt engineering", "Application security", "Secure SDLC", "Vulnerability management", "Code analysis", "Risk assessment", "Security architecture", "Offensive security", "Exploit development", "Adversarial thinking", "Red-team exercises", "Severity decisions", "Workflow enrichment", "AI security", "Secure coding", "Remediation guidance", "Modern SaaS environments", "AI-powered features", "AI systems", "SAST tooling", "Bug bounty", "SCA tooling" ], "skillCount" : 29, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 1.0, "_score" : 1022.62054, "daysOld" : 1, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "SaaS", "llmIndustryConfidence" : 0.98 }, { "id" : "6a2ca63b74d8ee00a09ba3da", "title" : "Senior Application Security Engineer", "company" : "Brex", "industry" : "FinTech", "salary" : { "min" : 192000.0, "max" : 240000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Remote", "locations" : [ "Remote" ], "timestamp" : "2026-06-15T04:54:15.674", "fingerprint" : "0973174ae78fe1d2778ac643fd0800781caa8efc825af59b81b5a9b6faa45edc", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://www.brex.com/careers/8590025002?gh_jid=8590025002", "externalId" : "8590025002", "industryFunction" : { }, "structuredLocations" : [ { "workMode" : "remote" } ], "locationText" : "", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "Python, Scripting languages, AI, Agentic workflows, Kotlin, GRPC, GraphQL, Kubernetes, AWS", "professionalSkills" : [ "Threat modeling", "Developer education", "Incident response", "Penetration testing", "Design reviews", "Vulnerability management", "Secure product features", "Secure developer workflows", "Secure development practices", "Technical leadership", "Learning sessions", "Mentorship" ], "hardSkillsList" : [ "Code reviews", "Penetration testing", "Vulnerability management", "Static testing", "Dynamic testing", "Attack chains" ], "hardSkills" : [ { "name" : "Code reviews", "level" : "intermediate" }, { "name" : "Penetration testing", "level" : "intermediate" }, { "name" : "Vulnerability management", "level" : "intermediate" }, { "name" : "Static testing", "level" : "intermediate" }, { "name" : "Dynamic testing", "level" : "intermediate" }, { "name" : "Attack chains", "level" : "intermediate" } ], "majorSkills" : "Application Security, Penetration testing, Vulnerability management, AI Security", "majorSkillsList" : [ "Application Security", "Penetration testing", "Vulnerability management", "AI Security" ], "coreResponsibilities" : "Identify vulnerabilities, Demonstrate business impact, Articulate risk of vulnerabilities, Perform penetration testing, Perform design reviews, Find vulnerabilities, Find insecure designs, Design secure product features, Maintain internal tools, Build internal tools, Automate security efforts, Perform SAST testing, Perform DAST testing, Support secure development practices, Build culture of security excellence, Contribute to security excellence, Provide technical leadership, Conduct learning sessions, Provide mentorship", "teamCollaboration" : "Cross functional; Security Operations; GRC; Product Security; Front End Platform; IT Infrastructure teams; Engineering teams", "domainKnowledge" : "Financial services; AI Security; Agentic features; Agentic systems; Distributed systems; Cloud environments", "domainList" : [ "financial-services", "ai-security", "agentic-features", "agentic-systems", "distributed-systems", "cloud-environments" ], "domainSpecificKnowledge" : [ "Financial services", "AI Security", "Agentic features", "Agentic systems", "Distributed systems", "Cloud environments" ], "toolProficiency" : [ "SAST", "DAST" ], "communicationSkills" : "Written communication; Verbal communication", "problemSolvingSkills" : "Root cause analysis", "qualificationsBasic" : "5+ years work experience, 5+ years Application Security", "qualificationsPreferred" : "Proficiency with Kotlin, Proficiency with gRPC, Proficiency with GraphQL, Proficiency with Kubernetes, Previous software engineer experience, Consultancy experience, Experience securing distributed systems, Experience with AWS, Experience with pentesting agentic features, Experience securing agentic systems, Contributions to technical community, Experience submitting to bug bounty programs, Experience with responsible disclosure programs", "remoteFriendly" : true, "workSiteFlexibility" : "Remote", "rawDescription" : "Why join us Brex is the intelligent finance platform that enables companies to spend smarter and move faster in more than 200 markets. By combining global corporate cards and banking with intuitive spend management, bill pay, and travel software, Brex enables founders and finance teams to accelerate operations, gain real-time visibility, and control spend effortlessly. Brex’s AI-native automation and world-class service eliminate manual expense and accounting tasks for customers so they can focus on what matters most. Tens of thousands of the world's best companies run on Brex, including DoorDash, Coinbase, Robinhood, Zoom, Plaid, Reddit, and SeatGeek. Working at Brex allows you to push your limits, challenge the status quo, and collaborate with some of the brightest minds in the industry. We’re committed to building a diverse team and inclusive culture and believe your potential should only be limited by how big you can dream. We make this a reality by empowering you with the tools, resources, and support you need to grow your career. Engineering at Brex Engineering at Brex is about building systems that scale with speed and intention. Our teams span Software, Data, Security, and IT, and operate with high autonomy and deep collaboration. We tackle hard technical problems, own our outcomes, and push for excellence at every level — from architecture to deployment. It’s an environment where engineering is a craft, and builders become leaders. What you’ll do As a Senior Application Security Engineer, you will focus on finding and responding to security vulnerabilities across the Brex platform. In this role, you will perform code reviews, design reviews, penetration testing, and vulnerability management. You will develop and maintain tooling to perform static and dynamic testing of the Brex platform and tooling which supports secure developer workflows. Application Security is part of our wider Financial Scale organization, which means you will work closely with Security Operations, GRC, Product Security, Front End Platform, IT Infrastructure teams. We’re looking for individuals with a strong background and interest in penetration testing. You should have a demonstrated ability to find vulnerabilities in complex systems and craft exploits to demonstrate business impact. This role is highly cross functional and collaborative, you will have the opportunity to work with every engineering team across Brex. You should be enthusiastic about working with a variety of backgrounds, roles, and needs. Building a world-class financial service requires world-class security. Brex is pioneering the next wave of AI-driven financial services for dynamic, high-impact companies like Coinbase, Robinhood, and Anthropic. We're at the early stages of integrating AI across our product suite, this role will have the opportunity to influence and secure the future of AI Security at Brex. You'll be at the forefront of securing our novel AI implementations, identifying attack vectors in agentic-powered features, and partnering with product and engineering teams to build AI capabilities that our customers can trust with their critical financial operations. Responsibilities Identifying vulnerabilities, demonstrating business impact, and articulating the risk of specific vulnerabilities to drive prioritization efforts Perform penetration testing and design reviews, looking for vulnerabilities and insecure designs, work with engineering and product to design secure product features Maintain and build internal tools to automate security efforts, perform SAST and DAST testing of the Brex platform, and support secure development practices Build and contribute to a culture of collaborative security excellence through technical leadership, learning sessions, and mentorship within the team and wider organization Requirements 5+ years work experience in an Application Security or related role Ability to find vulnerabilities in complex systems, demonstrating business impact through custom attack chains Experience with a wide range of secure development activities including— threat modeling, developer education, and incident response Knowledge of Python, scripting languages, and AI/agentic workflows to automate tasks, build tools and improve productivity Collaborative mindset paired with strong written and verbal communication skills Bonus points Proficiency with Kotlin, gRPC, GraphQL, Kubernetes Previous experience as a software engineer Consultancy experience performing web application security reviews Experience with securing distributed systems in AWS and cloud environments Experience with pentesting and securing agentic features and systems Contributions to the wider technical community— open source, public research, mentorship, community organizing, blogging, CVEs, presentations, etc Experience submitting to bug bounty programs or responsible disclosure programs Compensation The expected salary range for this role is $192,000 - $240,000. However, the starting base pay will depend on a number of factors including the candidate’s location, skills, experience, market demands, and internal pay parity. Depending on the position offered, equity and other forms of compensation may be provided as part of a total compensation package. Brex LLC is a wholly owned subsidiary of Capital One, N. A. Please be aware, job-seekers may be at risk of targeting by malicious actors looking for personal data. Brex recruiters will only reach out via LinkedIn or email with a brex.com domain. Any outreach claiming to be from Brex via other sources should be ignored.", "summaryDescription" : "Senior Application Security Engineer at Brex. Skills: Application Security, Penetration testing, Vulnerability management, AI Security. Identify vulnerabilities. Demonstrate business impact", "postedDate" : "2026-06-14T05:23:35.047", "createdAt" : "2026-06-14T05:23:35.047", "lastUpdated" : "2026-06-15T04:54:15.674", "ingestTimestamp" : "2026-06-14T05:23:35.047", "mongoId" : "6a2ca63b74d8ee00a09ba3da", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 192000, "salaryAnnualMax" : 240000, "salaryBand" : "150k-200k", "hasSalary" : true, "allSkills" : [ "Code reviews", "Penetration testing", "Vulnerability management", "Static testing", "Dynamic testing", "Attack chains", "Application Security", "AI Security", "Threat modeling", "Developer education", "Incident response", "Design reviews", "Secure product features", "Secure developer workflows", "Secure development practices", "Technical leadership", "Learning sessions", "Mentorship", "Financial services", "Agentic features", "Agentic systems", "Distributed systems", "Cloud environments", "SAST", "DAST" ], "skillCount" : 25, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 1.0, "_score" : 1018.80524, "daysOld" : 0, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "FinTech", "llmIndustryConfidence" : 0.98 }, { "id" : "6a25145274d8ee00a00bb2ee", "title" : "Application Security Engineer", "company" : "Amazon.com Services LLC", "industry" : "Systems, Quality, Security Engineering, Systems Security Engineering, amazon security", "salary" : { "min" : 136000.0, "max" : 184000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Seattle, Washington, USA", "locations" : [ "Seattle, Washington, USA" ], "timestamp" : "2026-06-14T23:59:06.448", "fingerprint" : "1cd50972851b6f532f6b1a59136d46803ccca19f47952d630df752bd4b2a4597", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.jobs/jobs/10441199/apply", "externalId" : "730e38c1-9831-47c9-9259-6a1fe5a68737", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Seattle", "state" : "Washington", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "47.6038321,-122.3300620" } ], "locationText" : "Seattle, Washington, United States", "employmentType" : "FULL_TIME", "technicalSkills" : "Python, C, C++, Java, Ruby, PowerShell, AWS, EC2, S3, Lambda, Terraform, Docker, Kubernetes", "professionalSkills" : [ "System design", "Threat modeling", "Security guidance", "Risk assessments" ], "hardSkillsList" : [ "Secure coding practices", "Authentication mechanisms", "Authorization mechanisms", "Cryptographic implementations", "Data protection strategies" ], "hardSkills" : [ { "name" : "Secure coding practices", "level" : "intermediate" }, { "name" : "Authentication mechanisms", "level" : "intermediate" }, { "name" : "Authorization mechanisms", "level" : "intermediate" }, { "name" : "Cryptographic implementations", "level" : "intermediate" }, { "name" : "Data protection strategies", "level" : "intermediate" } ], "majorSkills" : "Application security, Security reviews, Threat modeling, Penetration testing", "majorSkillsList" : [ "Application security", "Security reviews", "Threat modeling", "Penetration testing" ], "coreResponsibilities" : "Conduct security design reviews, Evaluate architecture documents, Evaluate threat models, Evaluate system designs, Perform threat modeling exercises, Identify attack vectors, Identify security weaknesses, Identify areas of concern, Execute penetration testing, Coordinate penetration testing, Validate security controls, Identify exploitable vulnerabilities, Document security findings, Track security findings, Communicate security findings, Provide remediation guidance, Verify security fixes, Provide security consultation, Identify high-severity issues, Escalate security issues, Maintain documentation of reviews, Maintain documentation of decisions, Maintain documentation of assessments, Leverage automated tools, Leverage internal platforms", "teamCollaboration" : "Work with development teams; Work with service teams", "domainKnowledge" : "Web protocols; Security standards; Application architectures; Cloud security; Mobile security; AI security; Identity and access controls; Web application development; Cryptography; Public key infrastructure; Forensic security; IP security; SSL/TLS; Computer viruses; Malware; Network security; Trusted security; Trusted execution; Threat intelligence; IoT security", "domainList" : [ "web-protocols", "security-standards", "application-architectures", "cloud-security", "mobile-security", "ai-security", "identity-and-access-controls", "web-application-development", "cryptography", "public-key-infrastructure", "forensic-security", "ip-security", "ssl-tls", "computer-viruses", "malware", "network-security", "trusted-security", "trusted-execution", "threat-intelligence", "iot-security" ], "domainSpecificKnowledge" : [ "Web protocols", "Security standards", "Application architectures", "Cloud security", "Mobile security", "AI security", "Identity and access controls", "Web application development", "Cryptography", "Public key infrastructure", "Forensic security", "IP security", "SSL/TLS", "Computer viruses", "Malware", "Network security", "Trusted security", "Trusted execution", "Threat intelligence", "IoT security" ], "toolProficiency" : [ "Internal security platforms" ], "communicationSkills" : "Communicate findings", "documentationSkills" : "Maintain documentation; Risk assessments", "problemSolvingSkills" : "Identify vulnerabilities; Identify risks; Identify weaknesses; Identify concerns; Identify issues", "qualificationsBasic" : "2+ years web protocols experience, 2+ years common security attacks experience, 2+ years remediation experience, Bachelor's degree in Engineering, Bachelor's degree in Computer Science, Knowledge of system security vulnerabilities, Knowledge of remediation techniques, Experience with penetration testing, Experience with exploit development, Experience with application security architecture, Experience with security code reviews, Experience with security testing, Experience with incident response, Experience with security infrastructure, Experience coding in one language, Experience scripting in one language", "qualificationsPreferred" : "Experience with AWS services, Experience with other cloud offerings, Experience with application security frameworks, Experience with mobile security, Experience with cloud security, Experience with AI security, Experience with identity and access controls, Knowledge of web application development, Knowledge of penetration testing, Knowledge of mobile security, Knowledge of cryptography, Knowledge of public key infrastructure, Knowledge of forensic security, Knowledge of IP security, Knowledge of SSL/TLS, Knowledge of computer viruses, Knowledge of malware, Knowledge of network security, Knowledge of trusted security, Knowledge of trusted execution, Knowledge of threat intelligence, Knowledge of IoT security implications, Knowledge of authentication, Experience scripting with Python, Experience scripting with Perl, Experience scripting with Bash, Experience scripting with PowerShell, Experience triaging security alerts, Experience developing security alerts, Experience automating security response, Experience conducting front-line analysis, Experience providing escalation support", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "The Application Security (AppSec) Security Engineer is responsible for conducting security assessments and reviews of applications and services to identify vulnerabilities and ensure adherence to security standards. This role works under the guidance of senior engineers to evaluate system designs, perform threat modeling, and validate that services meet the organization's security bar before launch. Key job responsibilities Security Reviews: Conduct security design reviews for new and existing services, evaluating architecture documents, threat models, and system designs for potential security risks Threat Modeling: Perform threat modeling exercises to identify attack vectors, security weaknesses, and areas of concern in application architectures Penetration Testing: Execute or coordinate penetration testing activities to validate security controls and identify exploitable vulnerabilities Finding Management: Document, track, and communicate security findings to service teams, providing clear remediation guidance and verifying fixes Security Guidance: Provide security consultation to development teams on secure coding practices, authentication/authorization mechanisms, cryptographic implementations, and data protection strategies Escalation Support: Identify and escalate high-severity security issues through appropriate channels, ensuring timely remediation aligned with launch timelines Documentation: Maintain clear and thorough documentation of review outcomes, security decisions, and risk assessments Tool Utilization: Leverage automated security scanning tools and internal security platforms to support review activities and improve efficiency About the team Diverse Experiences Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying. Why Amazon Security? At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores. Inclusive Team Culture In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices. Training & Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve. Basic Qualifications: - 2+ years of web protocols, common security attacks, and remediation (non-internship) experience - Bachelor's degree in Engineering, Computer Science, or a related field - Knowledge of system security vulnerabilities and remediation techniques, including penetration testing and the development of exploits or equivalent - Experience with web protocols, common security attacks, and remediation (non-internship) - Experience in application security architecture, security code reviews, security testing, incident response, or security infrastructure - Experience with coding/scripting in one or more languages (e.g., Python, C, C++, Java, Ruby, or PowerShell) Preferred Qualifications: - Experience with AWS services or other cloud offerings - Experience in one or more of the following: application security frameworks, security code reviews, incident response, security infrastructure, penetration testing, mobile security, cloud security, AI security, identity and access controls - Knowledge of one or more of the following domains: web application development, penetration testing, mobile security, cryptography, public key infrastructure, forensic security, IP security, SSL/TLS, computer viruses and malware, network security, trusted security, trusted execution, threat intelligence, IoT security implications, or authentication - Experience scripting with Python, Perl, Bash or PowerShell - Experience triaging and developing security alerts and response automation, conducting front-line analysis, and providing escalation support Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits . USA, WA, Seattle - 136,000.00 - 184,000.00 USD annually", "summaryDescription" : "Application Security Engineer at Amazon.com Services LLC. Skills: Application security, Security reviews, Threat modeling, Penetration testing. Conduct security design reviews. Evaluate architecture documents", "postedDate" : "2026-06-13T06:19:29.158", "createdAt" : "2026-06-13T06:19:29.158", "lastUpdated" : "2026-06-14T23:59:06.448", "ingestTimestamp" : "2026-06-13T06:19:29.158", "mongoId" : "6a25145274d8ee00a00bb2ee", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.jobs/jobs/10441199/apply", "salaryAnnualMin" : 136000, "salaryAnnualMax" : 184000, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Secure coding practices", "Authentication mechanisms", "Authorization mechanisms", "Cryptographic implementations", "Data protection strategies", "Application security", "Security reviews", "Threat modeling", "Penetration testing", "System design", "Security guidance", "Risk assessments", "Web protocols", "Security standards", "Application architectures", "Cloud security", "Mobile security", "AI security", "Identity and access controls", "Web application development", "Cryptography", "Public key infrastructure", "Forensic security", "IP security", "SSL/TLS", "Computer viruses", "Malware", "Network security", "Trusted security", "Trusted execution", "Threat intelligence", "IoT security", "Internal security platforms" ], "skillCount" : 33, "jobCategory" : "engineering", "dataQualityScore" : 0.8888889, "_score" : 1015.70264, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true }, { "id" : "6a2caf3974d8ee00a09d66ac", "title" : "Application Security Engineer", "company" : "MicroStrategy", "industry" : "Computer Software", "salary" : { "min" : 95000.0, "max" : 135000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Junior Application Security Engineer in Tysons Corner, United States, adjusted for the technology industry and company size." }, "location" : "Tysons Corner, VIRGINIA, United States", "locations" : [ "Tysons Corner", "VIRGINIA", "United States" ], "certifications" : [ "CISSP", "CEH", "OSCP" ], "timestamp" : "2026-06-16T01:03:15.905", "fingerprint" : "bef4a6b6f1c369a526818dee4ddacd07240b4de72ed3ee4b53a718f1acab7bcf", "source" : "smartrecruiters", "language" : "en", "applyUrl" : "https://jobs.smartrecruiters.com/MicroStrategy1/744000132000119-application-security-engineer", "externalId" : "744000132000119", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Tysons Corner", "state" : "Virginia", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "38.9191272,-77.2229636" } ], "locationText" : "Tysons Corner, Virginia, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "mid", "technicalSkills" : "Application Security, Security Assessment Tools, Secure Coding, Threat Modeling, Vulnerability Management, Cloud Security, CI/CD, Scripting Languages", "professionalSkills" : [ "Risk assessment", "Security architecture", "Incident response" ], "hardSkillsList" : [ "Penetration testing", "Code review", "Security audits" ], "hardSkills" : [ { "name" : "Penetration testing", "level" : "intermediate" }, { "name" : "Code review", "level" : "intermediate" }, { "name" : "Security audits", "level" : "intermediate" } ], "majorSkills" : "Application Security, Secure Development Lifecycle, Vulnerability Management", "majorSkillsList" : [ "Application Security", "Secure Development Lifecycle", "Vulnerability Management" ], "coreResponsibilities" : "Develop and implement application security strategies, Conduct security assessments and penetration tests, Identify and remediate vulnerabilities, Provide security guidance to development teams, Develop and maintain security tools, Stay up-to-date on emerging security threats, Collaborate with engineering teams, Improve secure coding practices", "teamCollaboration" : "Development teams; Engineering teams; Cross-functional teams", "domainKnowledge" : "Web application security; API security; Cloud security; SDLC security", "domainList" : [ "web-application-security", "api-security", "cloud-security", "sdlc-security" ], "domainSpecificKnowledge" : [ "Web application security", "API security", "Cloud security", "SDLC security" ], "toolProficiency" : [ "Burp Suite", "OWASP ZAP", "Nessus", "Fortify", "Checkmarx", "JIRA" ], "communicationSkills" : "Technical reporting; Security awareness training", "documentationSkills" : "Security policies; Procedures; Assessment reports", "continuousLearning" : "Security conferences; Training courses", "problemSolvingSkills" : "Root cause analysis; Troubleshooting; Security incident analysis", "outcomesObjectives" : "Reduce application vulnerabilities; Enhance security posture; Ensure compliance with security standards", "qualificationsBasic" : "Bachelor's degree in Computer Science or related field, 5+ years of experience in application security, Experience with security assessment tools, Experience with secure coding practices, Experience with threat modeling, Experience with vulnerability management", "qualificationsPreferred" : "Master's degree in Computer Science or related field, Experience with cloud security, Experience with CI/CD pipelines, Experience with scripting languages, Relevant security certifications", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Strategy (Nasdaq: MSTR) is at the forefront of transforming organizations into intelligent enterprises through data-driven innovation. We don't just follow trends—we set them and drive change. As a market leader in enterprise analytics and AI software, we've pioneered the BI and analytics space, empowering people to make better decisions and revolutionizing how businesses operate. We are now also at the forefront of AI disruption, providing data via our enterprise semantic layer to AI agents, tools, and platforms. But that's not all. Strategy is also leading a groundbreaking shift in digital assets, adopting bitcoin as our primary treasury reserve asset in 2020. Since then, we have issued innovative bitcoin-backed securities and have been the leader in bitcoin treasury companies. This visionary move has helped us build a fortress balance sheet, and is solidifying our position as a forward-thinking, innovative force in the market. Our people are the core of our success. At Strategy, you'll join a team of smart, creative minds working on dynamic projects with cutting-edge technologies. We thrive on curiosity, innovation, and a relentless pursuit of excellence. Our corporate values—bold, agile, engaged, impactful, and united—are the foundation of our culture. As we lead the charge into the new era of AI and financial innovation, we foster an environment where every employee's contributions are recognized and valued. Join us and be part of an organization that lives and breathes innovation every day. At Strategy, you're not just another employee, you're a crucial part of a mission to push the boundaries of analytics and redefine financial investment. Application Security Engineer Strategy (Nasdaq: MSTR) • Tysons Corner, VA • Full-time, 5 days/week on-site Job Description Join Strategy's IT Security group as an Application Security Engineer and play a crucial role in safeguarding Strategy's software applications by deploying AI-powered security tooling to protect the software development lifecycle at scale. You will be responsible for integrating security practices throughout the SDLC, ensuring our software products are resilient against vulnerabilities. Responsibilities * AI Security Governance: Evaluate and establish guardrails for the secure use of AI coding assistants (e.g., Copilot, Cursor, Claude) within the engineering organization, including policy development around AI-generated code review, training data exposure risks, and prompt injection vulnerabilities in AI-integrated applications. * Secure SDLC Integration: Work closely with development teams to integrate security into the SDLC, including threat modeling, secure code reviews, and security testing. * Vulnerability Management: Identify, triage, and remediate security vulnerabilities through static and dynamic application security testing (SAST/DAST) and software composition analysis (SCA) tools. * Security Assessments & Penetration Testing: Conduct manual and automated penetration testing of web, mobile, and cloud applications to detect security flaws. * Secure Code Review: Analyze source code using both manual review and AI-assisted code analysis tools (e.g., GitHub Copilot Autofix, Semgrep, or similar) to surface vulnerabilities earlier in the development cycle and deliver actionable, in-context remediation guidance to developers. * Threat Modeling & Risk Analysis: Perform threat modeling to anticipate potential attack vectors and improve security architecture. * DevSecOps Enablement: Support and enhance DevSecOps initiatives by integrating AI-assisted security automation within CI/CD pipelines, including AI-powered SAST/DAST tools and LLM-based code scanning to accelerate vulnerability detection at the point of commit. * Incident Response & Remediation: Assist in investigating security incidents related to applications and work with engineering teams to remediate threats. * Security Awareness & Training: Educate and mentor developers on OWASP Top 10, SANS 25, and other security best practices. Qualifications * Bachelor's degree in Computer Science, Engineering, or related field * Minimum 2 years of software development or software security experience in an agile environment * Hands-on experience applying Generative AI and/or ML to security use cases—such as vulnerability triage, threat detection, or secure code review automation—and a strong drive to stay current as AI security tooling evolves. * Hands-on experience with SAST, DAST, IAST, and SCA tools (e.g., Checkmarx, Fortify, Veracode, SonarQube, Burp Suite, ZAP) * Fluent in one or more programming languages, such as Python, Java, JavaScript * Strong knowledge of secure coding principles and application security frameworks * Familiarity with security tools (e.g., static and dynamic analysis tools, vulnerability scanners) * Understanding of security standards and regulations (e.g., OWASP, NIST) * Experience with cloud security best practices in AWS, Azure, or GCP * Familiarity with AI/LLM-specific security risks including prompt injection, model poisoning, insecure output handling, and the OWASP Top 10 for LLM Applications. * Strong work ethic with a commitment to meeting business needs and effectively collaborating with global colleagues * Effective interpersonal skills; ability to collaborate successfully with both technical and non-technical stakeholders * Ability to articulate complex technical concepts with clarity, supported by effective written and verbal communication skills ## Additional Information Strategy is an equal opportunity employer. All applicants will receive consideration for employment without regard to race, creed, color, religion, national origin, gender, sex, sexual orientation, gender identity, disability, veteran status, age, genetic information, or any other legally-protected basis. Strategy provides reasonable accommodation for qualified individuals with disabilities in the hiring process. If you have any difficulty using our online system and you need an accommodation due to a disability, you may contact us about your interest in employment at [applicationaccommodations@strategy.com](mailto:applicationaccommodations@strategy.com). Visit Strategy’s Careers page for additional information.", "summaryDescription" : "Application Security Engineer at MicroStrategy. Skills: Application Security, Secure Development Lifecycle, Vulnerability Management. Develop and implement application security strategies. Conduct security assessments and penetration tests", "postedDate" : "2026-06-13T01:02:16.000", "createdAt" : "2026-06-14T20:28:51.513", "lastUpdated" : "2026-06-16T01:03:15.905", "ingestTimestamp" : "2026-06-14T20:28:51.513", "mongoId" : "6a2caf3974d8ee00a09d66ac", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 95000, "salaryAnnualMax" : 135000, "salaryBand" : "75k-100k", "hasSalary" : true, "allSkills" : [ "Penetration testing", "Code review", "Security audits", "Application Security", "Secure Development Lifecycle", "Vulnerability Management", "Risk assessment", "Security architecture", "Incident response", "Web application security", "API security", "Cloud security", "SDLC security", "CISSP", "CEH", "OSCP", "Burp Suite", "OWASP ZAP", "Nessus", "Fortify", "Checkmarx", "JIRA" ], "skillCount" : 22, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Junior", "dataQualityScore" : 1.0, "_score" : 1013.21173, "daysOld" : 3, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a21770e74d8ee00a0c1ba8e", "title" : "Application Architect", "company" : "Amazon Web Services", "industry" : "Solutions Architect, Professional Services, Cloud Computing", "salary" : { "min" : 1.05E8, "max" : 1.5E8, "currency" : "KRW", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for Senior Application Architect in Seoul, South Korea, adjusted for AWS's size and industry." }, "location" : "Seoul, KOR", "locations" : [ "Seoul, KOR" ], "timestamp" : "2026-06-15T02:01:02.737", "fingerprint" : "133933ad2a7e66e3bf60e13bcb2028d959bbd0007ce286fd4c0d376aabdc57d6", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.jobs/jobs/10435223/apply", "externalId" : "02c0aa27-61cc-496f-93f8-29028bb6bcb4", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Seoul", "country" : "South Korea", "continent" : "as", "source" : "llm", "workMode" : "onsite", "geo" : "37.5666791,126.9782914" } ], "locationText" : "Seoul, South Korea", "employmentType" : "FULL_TIME", "technicalSkills" : "Java, Python, AWS, Cloud-native design, Serverless, Microservices", "professionalSkills" : [ "Application solutions", "Cloud optimized", "Technical leader", "Software development", "Cloud architecture", "Design patterns", "Programming", "AWS best practices", "Infrastructure specialist", "Application development", "Agile software", "DevOps practices", "Infrastructure as code", "Continuous integration", "Automated deployment" ], "hardSkillsList" : [ "Software development", "Cloud architecture", "Design patterns", "Programming", "Infrastructure as code", "Continuous integration", "Automated deployment" ], "softSkillsList" : [ "Leadership" ], "hardSkills" : [ { "name" : "Software development", "level" : "intermediate" }, { "name" : "Cloud architecture", "level" : "intermediate" }, { "name" : "Design patterns", "level" : "intermediate" }, { "name" : "Programming", "level" : "intermediate" }, { "name" : "Infrastructure as code", "level" : "intermediate" }, { "name" : "Continuous integration", "level" : "intermediate" }, { "name" : "Automated deployment", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" } ], "majorSkills" : "Application Architecture, Cloud Computing, Software Development, DevOps", "majorSkillsList" : [ "Application Architecture", "Cloud Computing", "Software Development", "DevOps" ], "coreResponsibilities" : "Architect scalable solutions, Architect highly available solutions, Develop scalable solutions, Develop highly available solutions, Leverage AWS services, Architect customer applications, Develop customer applications, Optimize applications for cloud, Work as technical leader, Provide software development knowledge, Advise AWS best practices, Implement AWS best practices, Act as infrastructure specialist, Act as application development specialist, Develop Agile software, Implement DevOps practices, Implement infrastructure as code, Implement continuous integration, Implement automated deployment", "teamCollaboration" : "Customer business teams; Customer development teams; Customer infrastructure teams; AWS organization", "projectManagementSkills" : [ "Agile", "Scrum", "DevOps" ], "domainKnowledge" : "Cloud architecture; Design patterns; Cloud environments; Cloud-native design; Serverless; Microservices", "domainList" : [ "cloud-architecture", "design-patterns", "cloud-environments", "cloud-native-design", "serverless", "microservices" ], "domainSpecificKnowledge" : [ "Cloud architecture", "Design patterns", "Cloud environments", "Cloud-native design", "Serverless", "Microservices" ], "toolProficiency" : [ "AWS services" ], "continuousLearning" : "Knowledge sharing; Mentorship; Career development", "innovationCreativity" : "Drive feature innovation", "specialRequirements" : "Travel to client locations", "qualificationsBasic" : "10+ years technical specialist experience, 10+ years design experience, 10+ years architecture experience, Develop software code, Experience with software development lifecycle, Experience in agile/scrum, Experience architecting cloud applications, Experience optimizing applications for cloud, Experience in customer-facing technical delivery", "qualificationsPreferred" : "Facilitate discussions with senior leadership, Design business software at scale, Develop business software at scale, Deploy business software at scale, Contribute to modernization programs, Contribute to migration programs, Multi-vendor environments exposure, AI-driven application development exposure", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "At Amazon Web Services (AWS), we’re hiring highly technical cloud appliction architects to help our customers develop technical expertise and capacity, while also collaborating with our customers and partners on key engagements. Our consultants will deliver Pilot projects, topical workshops, and lead implementation projects. Professional Services engage in a wide variety of projects for customers, providing collective experience from across the AWS customer base and are obsessed about strong success for the Customer. Our team collaborates across the entire AWS organization to bring access to product and service teams, to get the right solution delivered and drive feature innovation based upon customer needs. Amazon Web Services (AWS)에서는 고객이 전문지식 역량을 개발할 수 있도록 돕고, 이를 위해 파트너와 협력할 수 있는 뛰어난 기술역량을 갖춘 클라우드 어플리케이션 아키텍트를 채용하고 있습니다. AWS의 컨설턴트들은 아키텍쳐 검토와 파일럿 개발, 주제별 워크샵, 그리고 프로젝트를 통한 딜리버리를 담당하게 됩니다. 프로페셔널 서비스팀은 다양한 프로젝트를 통해 축적한 경험을 바탕으로 고객의 성공을 돕습니다. 또한, AWS 내부 다른 조직과 협력하여 제품과 서비스, 그리고 적절한 해결책을 고객에게 제공하고 고객 요구 사항에 따라 혁신을 추진합니다. Key job responsibilities We are looking for hands on developers who are passionate about: • Helping customers architect scalable, highly available application solutions that leverage AWS services • Architecting and developing customer applications to be cloud optimized • Working as a technical leader along side customer business, development and infrastructure teams. • Providing deep software development knowledge with respect cloud architecture, design patterns and programming • Advising and implementing AWS best practices • Working as both an infrastructure and application development specialist • Agile software development and DevOps • Implementing DevOps practices such as infrastructure as code, continuous integration and automated deployment 아래 사항들에 관심있는 개발자분들의 많은 지원 바랍니다. • AWS 서비스상에서 확장 가능하고 가용성 높은 어플리케이션 솔루션 설계 지원 • 클라우드에 최적화 될 수 있는 고객 어플리케이션 설계 및 개발 • 고객 비즈니스, 개발, 운영 팀과 협업할 테크니컬 리더 • 클라우드 아키텍처, 디자인 패턴 및 프로그래밍과 관련한 심층적인 소프트웨어 개발 지식 제공 • AWS 우수 사례 소개 및 실현 • 인프라 및 어플리케이션 개발 전문가로 활동 • Agile 방식의 소프트웨어 개발과 DevOps • 코드 인프라, 지속적인 통합 및 자동화 배포와 같은 DevOps 사례 구현 A day in the life This is a customer facing role. You will be required to travel to client locations and deliver professional services as needed. 고객을 대면하는 역할이며, 필요에 따라 전문적인 서비스 제공을 위해 고객을 방문해야 할 수 있습니다. About the team About AWS Diverse Experiences AWS values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying. 다양성 AWS는 다양한 경험을 중요하게 생각합니다. JD에 나와 있는 자격 및 기술을 모두 충족하지 못하더라도 지원자가 지원하도록 권장합니다. 경력을 이제 막 시작하였거나, 전통적인 경력을 쌓지 않았거나, 조금 다른 경험을 쌓았다고, 지원을 중단하실 필요는 없습니다. Why AWS? Amazon Web Services (AWS) is the world’s most comprehensive and broadly adopted cloud platform. We pioneered cloud computing and never stopped innovating — that’s why customers from the most successful startups to Global 500 companies trust our robust suite of products and services to power their businesses. AWS를 선택해야 하는 이유 아마존 웹 서비스 (AWS) 는 세계에서 가장 포괄적이고 널리 채택된 클라우드 플랫폼입니다.우리는 클라우드 컴퓨팅 시장을 개척했으며 혁신을 멈추지 않았습니다. 이것이 바로 가장 성공적인 스타트업부터 Global 500 기업에 이르는 고객이 AWS의 제품 및 서비스 제품군을 신뢰하는 이유입니다. Inclusive Team Culture AWS values curiosity and connection. Our employee-led and company-sponsored affinity groups promote inclusion and empower our people to take pride in what makes us unique. Our inclusion events foster stronger, more collaborative teams. Our continual innovation is fueled by the bold ideas, fresh perspectives, and passionate voices our teams bring to everything we do. 포용적인 팀 문화 AWS에서는 배우고 호기심을 갖는 것이 우리의 본능입니다.직원이 주도하는 어피니티 그룹은 서로 다른 점을 자랑스럽게 여길 수 있는 포용의 문화를 조성합니다. Mentorship & Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, mentorship and other career-advancing resources here to help you develop into a better-rounded professional. 멘토십 및 경력 개발 우리는 세계 최고의 고용주가 되기 위해 노력하면서 지속적으로 성과 기준을 높이고 있습니다.그렇기 때문에 더 다재다능한 전문가로 발전하는 데 도움이 되는 지식 공유, 멘토십 및 기타 경력 개발 리소스를 찾을 수 있습니다. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why we strive for flexibility as part of our working culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve in the cloud. 일과 삶의 균형 우리는 일과 삶의 조화를 중요하게 생각합니다.직장에서의 성공을 위해 가정에서의 희생을 감수해서는 안 됩니다. 그렇기 때문에 유연한 근무 시간과 근무 방식이 우리 문화의 일부입니다.직장과 가정에서 지지받는다고 느낄 때 클라우드로는 달성할 수 없는 것이 없습니다. #AWSKOREA #aws-korea-proserv-ap Basic Qualifications: - 10+ years of technical specialist, design and architecture experience - Experience developing software code in one or more programming languages (java, python, etc.) - Experience with software development lifecycle, or experience in agile/scrum or related collaborative workflow - Experience architecting and optimizing applications for cloud environments (e.g., cloud-native design patterns, serverless, microservices) - Experience in customer-facing technical delivery such as architecture reviews, workshops, or consulting engagements Preferred Qualifications: - Experience facilitating discussions with senior leadership regarding technical / architectural trade-offs, best practices, and risk mitigation - Experience designing, developing, and deploying business software at scale - Experience contributing to large-scale modernization or migration programs, with exposure to multi-vendor environments and AI-driven application development Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.", "summaryDescription" : "Application Architect at Amazon Web Services. Skills: Application Architecture, Cloud Computing, Software Development, DevOps. Architect scalable solutions. Architect highly available solutions", "postedDate" : "2026-06-13T04:32:28.939", "createdAt" : "2026-06-13T04:32:28.939", "lastUpdated" : "2026-06-15T02:01:02.737", "ingestTimestamp" : "2026-06-13T04:32:28.939", "mongoId" : "6a21770e74d8ee00a0c1ba8e", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.jobs/jobs/10435223/apply", "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "Software development", "Cloud architecture", "Design patterns", "Programming", "Infrastructure as code", "Continuous integration", "Automated deployment", "Leadership", "Application Architecture", "Cloud Computing", "Software Development", "DevOps", "Application solutions", "Cloud optimized", "Technical leader", "AWS best practices", "Infrastructure specialist", "Application development", "Agile software", "DevOps practices", "Agile", "Scrum", "Cloud environments", "Cloud-native design", "Serverless", "Microservices", "AWS services" ], "skillCount" : 27, "jobCategory" : "engineering", "dataQualityScore" : 0.8888889, "_score" : 1007.72675, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology" }, { "id" : "6a30556ef292fd229cf1f7ce", "title" : "Application Solution Architect", "company" : "Miratech", "industry" : "Information Technology And Services", "salary" : { "min" : 145000.0, "max" : 210000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Senior Application Solution Architect in the Technology industry in the United States, adjusted for seniority and remote work." }, "location" : "United States, US, United States", "locations" : [ "United States", "US", "United States" ], "timestamp" : "2026-06-16T08:57:36.943", "fingerprint" : "3fe2dd487a4b141df61cc61e9468e7d7e029252ffa28b38e3ea5ccabdb56bb9d", "source" : "smartrecruiters", "language" : "en", "applyUrl" : "https://jobs.smartrecruiters.com/Miratech1/744000132207059-application-solution-architect", "externalId" : "744000132207059", "industryFunction" : { }, "structuredLocations" : [ { "country" : "United States", "continent" : "na", "workMode" : "remote" } ], "locationText" : "United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "mid", "remoteFriendly" : false, "rawDescription" : "Miratech helps visionaries change the world. We are a global IT services and consulting company that brings together enterprise and start-up innovation. Today, we support digital transformation for some of the world's largest enterprises. By partnering with both large and small players, we stay at the leading edge of technology, remain nimble even as a global leader, and create technology that helps our clients further enhance their business. We are a values-driven organization and our culture of Relentless Performance has enabled over 99% of Miratech's engagements to succeed by meeting or exceeding our scope, schedule, and/or budget objectives since our inception in 1989. Miratech has coverage across 5 continents and operates in over 25 countries around the world. Miratech retains nearly 1000 full-time professionals, and our annual growth rate exceeds 25%. We are seeking an experienced Application Solution Architect to lead the modernization of enterprise applications and customer-facing platforms. The ideal candidate will be responsible for defining and driving modern architecture strategies, guiding technical teams, and working closely with stakeholders to deliver scalable, future-ready solutions. This role requires strong expertise in modern application architecture, cloud technologies, integration patterns, and customer engagement, particularly within telecom and contact center environments. Responsibilities: * Define and drive application modernization strategies for legacy platforms and user experiences. * Design and promote API-first, microservices-first, and event-driven architectures. * Create scalable, maintainable, and secure solution architectures aligned with business objectives. * Provide architectural leadership and technical guidance to Team Leads and engineering teams. * Evaluate existing systems and define modernization roadmaps, migration strategies, and target architectures. * Collaborate with customers, business stakeholders, and delivery teams to align technical solutions with business needs. * Present architectural proposals, negotiate technical approaches, and influence decision-making with challenging stakeholders and clients. * Establish and promote architecture standards, best practices, and governance processes. * Support integration initiatives involving ESB and modern integration platforms where applicable. * Contribute to solution estimations, risk assessments, and technical planning activities. ## Qualifications * Experience in Telecom, Contact Center, Customer Experience, or related industries. * Understanding of large-scale enterprise environments and digital transformation initiatives. * Proven experience as a Solution Architect, Application Architect, or Enterprise Architect. * Strong experience in modernizing enterprise applications and legacy systems. * Deep understanding of: * API-first architecture principles * Microservices architecture * Event-driven and event-based architecture patterns * Modern application architecture patterns and best practices * Experience with cloud platforms and cloud-native design principles. * Cloud certification in AWS, Azure, or Google Cloud (AWS preferred). * Experience with modern frontend and user experience frameworks. * Strong knowledge of system integration patterns and distributed systems. Nice to have: * TOGAF certification. * Experience with Enterprise Service Bus (ESB) platforms and integration architectures. * Experience with contact center technologies and customer engagement platforms. * Experience defining enterprise-wide architecture standards and governance frameworks. ## Additional Information We offer: * Culture of Relentless Performance: join an unstoppable technology development team with a 99% project success rate and more than 30% year-over-year revenue growth. * Competitive Pay and Benefits: enjoy a comprehensive compensation and benefits package, including health insurance, and a relocation program. * Work From Anywhere Culture: make the most of the flexibility that comes with remote work. * Growth Mindset : reap the benefits of a range of professional development opportunities, including certification programs, mentorship and talent investment programs, internal mobility and internship opportunities. * Global Impact: collaborate on impactful projects for top global clients and shape the future of industries. * Welcoming Multicultural Environment: be a part of a dynamic, global team and thrive in an inclusive and supportive work environment with open communication and regular team-building company social events. * Social Sustainability Values: join our sustainable business practices focused on five pillars, including IT education, community empowerment, fair operating practices, environmental sustainability, and gender equality. * Miratech is an equal opportunity employer and does not discriminate against any employee or applicant for employment on the basis of race, color, religion, sex, national origin, age, disability, veteran status, sexual orientation, gender identity, or any other protected status under applicable law.", "summaryDescription" : "Application Solution Architect at Miratech", "postedDate" : "2026-06-15T13:46:59.000", "createdAt" : "2026-06-15T23:45:12.236", "lastUpdated" : "2026-06-16T08:57:36.943", "ingestTimestamp" : "2026-06-15T23:45:12.236", "mongoId" : "6a30556ef292fd229cf1f7ce", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 145000, "salaryAnnualMax" : 210000, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 0.8888889, "_score" : 1002.1269, "daysOld" : 0, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2caf9b74d8ee00a09d75a9", "title" : "Lead Application Security Engineer", "company" : "Ivo", "industry" : "Security", "salary" : { "min" : 225000.0, "max" : 400000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "San Francisco", "locations" : [ "San Francisco" ], "certifications" : [ "OSCP", "OSWE" ], "timestamp" : "2026-06-15T09:36:49.446", "fingerprint" : "6fdde4ff7e536dea946aded2a9bed5cdaba69f7225d3d238ac4be000c5495c19", "source" : "ashby", "language" : "en", "applyUrl" : "https://jobs.ashbyhq.com/ivo-inc/58bde29f-9a06-4425-9183-ae839091f420/application", "externalId" : "58bde29f-9a06-4425-9183-ae839091f420", "industryFunction" : { }, "structuredLocations" : [ { "city" : "San Francisco", "state" : "California", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "37.7879363,-122.4075201" } ], "locationText" : "San Francisco, California, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 8, "experienceMaxYears" : 15, "experienceLevel" : "Lead", "technicalSkills" : "TypeScript, Node.js, Python, GCP, Azure, Kubernetes, SAST, DAST, SCA, Secrets detection, IaC scanning, OAuth, OIDC, SAML, SCIM, RBAC, Firebase Auth, WorkOS, LLM, Agent components", "professionalSkills" : [ "Threat modeling", "Incident response", "Enterprise security reviews", "Secure coding", "Product security", "Offensive security", "Code review", "Vendor management", "Researcher communications", "Security tooling", "SDLC integration", "Identity management", "Access control", "Customer-facing features", "Application security", "Responsible disclosure" ], "hardSkillsList" : [ "Pen testing", "Code review", "Vulnerability hunting", "Threat modeling", "Pen test management", "Responsible disclosure", "Application security tooling", "SDLC integration", "Identity and access", "Incident investigation", "Enterprise security", "Secure coding" ], "softSkillsList" : [ "Mentoring" ], "hardSkills" : [ { "name" : "Pen testing", "level" : "intermediate" }, { "name" : "Code review", "level" : "intermediate" }, { "name" : "Vulnerability hunting", "level" : "intermediate" }, { "name" : "Threat modeling", "level" : "intermediate" }, { "name" : "Pen test management", "level" : "intermediate" }, { "name" : "Responsible disclosure", "level" : "intermediate" }, { "name" : "Application security tooling", "level" : "intermediate" }, { "name" : "SDLC integration", "level" : "intermediate" }, { "name" : "Identity and access", "level" : "intermediate" }, { "name" : "Incident investigation", "level" : "intermediate" }, { "name" : "Enterprise security", "level" : "intermediate" }, { "name" : "Secure coding", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Mentoring" } ], "majorSkills" : "Application security, Pen testing, Code review, Threat modeling", "majorSkillsList" : [ "Application security", "Pen testing", "Code review", "Threat modeling" ], "coreResponsibilities" : "Own application security, Find and fix bugs, Hunt for vulnerabilities, Partner with engineers, Lead manual code review, Run threat modeling, Manage pen test program, Scope pen test work, Manage pen test vendors, Triage pen test findings, Drive remediation, Run responsible disclosure program, Build application security tooling, Embed security into SDLC, Conduct reviews of identity, Investigate security issues, Lead incident response, Contribute security input, Mentor engineers", "teamCollaboration" : "Embed with engineering; Partner with product; Cross-functional teams", "projectManagementSkills" : [ "Pen test management", "Responsible disclosure program" ], "domainKnowledge" : "OWASP Top 10; Multi-tenant isolation; API security; Container security; Kubernetes security; AI/LLM security; Prompt injection; Agent guardrails; AI threat modeling; Regulated industries", "domainList" : [ "owasp-top-10", "multi-tenant-isolation", "api-security", "container-security", "kubernetes-security", "ai-llm-security", "prompt-injection", "agent-guardrails", "ai-threat-modeling", "regulated-industries" ], "domainSpecificKnowledge" : [ "OWASP Top 10", "Multi-tenant isolation", "API security", "Container security", "Kubernetes security", "AI/LLM security", "Prompt injection", "Agent guardrails", "AI threat modeling", "Regulated industries" ], "toolProficiency" : [ "SAST", "DAST", "SCA", "Firebase Auth", "WorkOS" ], "communicationSkills" : "Written communication; Finding writeup; Security review", "documentationSkills" : "Trust documentation", "problemSolvingSkills" : "Root cause analysis; Troubleshooting", "qualificationsBasic" : "4+ years application security, Production platform security ownership, Hands-on web application pen testing, Deep code review experience, Web application security background, Practical cloud security experience, Container and Kubernetes security experience, Manage pen tests end to end, Partner with engineering", "qualificationsPreferred" : "Securing AI/LLM features, Build/scale security function, OSCP or OSWE, CVE credit or research, Design security as product, Support enterprise customers", "workSiteFlexibility" : "Flexible", "rawDescription" : "WHY JOIN IVO? Every civilization runs on the same infrastructure: agreements between people who don't fully trust each other. Sumerians pressed them into clay. Romans carved them into stone. We bury them in 80-page PDFs. The way those agreements are reviewed hasn't changed in four thousand years - a human reads the whole thing and tries not to miss anything. We're building the AI that finally changes that. Ivo is the contract intelligence platform of choice for companies like Uber, Meta, Canva, IBM, and Shopify. We recently raised our Series B and have grown 800% over the last 12 months. THE ROLE We're hiring our first dedicated Lead Application Security Engineer to own the security of the Ivo platform end to end. You'll partner directly with our Head of IT & Security and embed deeply with engineering to harden the product our customers trust with their most sensitive contracts. This is a hands-on senior IC role with broad scope: hunting bugs in our web app and APIs, reviewing security-sensitive code, running our pen test and responsible disclosure programs, threat modeling new features, and shaping how we build secure software at Ivo from the ground up. Our platform handles legally privileged documents for some of the largest companies in the world. The security stakes are real, and so is the impact. RESPONSIBILITIES - Own application security across Ivo's web app, API surface, and the systems behind them. - Find and fix bugs. Hunt for vulnerabilities in our own product through hands-on testing, code review, and offensive-minded experimentation, and partner with engineers to ship the fix. - Lead manual code review for security-sensitive changes: authentication, authorization, multi-tenancy, integrations, and customer data handling. - Run threat modeling with engineering as new features and products are designed, across the full product surface including LLM and agent components. - Manage our pen test program and ad-hoc engagements end to end. Scope work, manage vendors, triage findings, and drive remediation to closure with engineering. - Run our responsible disclosure program, including researcher communications, validation, payments, and ongoing relationships with trusted external researchers. - Build and maintain our application security tooling: SAST, DAST, SCA, secrets detection, and IaC scanning, with a strong bias toward signal over noise. - Embed security into the SDLC: PR-time checks, security champions, design review gates, and secure-by-default patterns engineers actually want to use. - Conduct deep reviews of identity and access surfaces (Firebase Auth, WorkOS, SSO, SAML, SCIM, RBAC) and partner with product on customer-facing security features. - Investigate suspected security issues and lead application-layer incident response alongside engineering. - Contribute application security input to enterprise security reviews, SOC 2 Type II, ISO 27001, ISO 42001, and customer-facing trust documentation. - Mentor engineers on secure coding and be the go-to expert when teams have a security question. WHO YOU ARE - 4+ years in application security, product security, or offensive security at a SaaS company, including time owning security for a production platform. - Strong hands-on web application pen testing skills. You can find real bugs in real code, not just run scanners. - Deep experience reviewing code in TypeScript / Node and Python. You're comfortable reading and writing code, not just reviewing it. - Strong background in web application security: OWASP Top 10, auth and authorization design (OAuth, OIDC, SAML, SSO), multi-tenant isolation, and modern API security. - Practical experience with cloud security in GCP and Azure, plus container and Kubernetes security (AKS or similar). - Experience managing pen tests, bug bounty programs, or responsible disclosure programs end to end. - Track record of partnering with engineering rather than blocking them. You ship paved roads, not tickets. - Excellent written communication. You can write a Slack post that engineers actually want to read, a finding writeup that's genuinely actionable, and a security review that an enterprise prospect respects. - A strong internal sense of urgency and a bias toward shipping today rather than tomorrow. NICE TO HAVE - Experience securing AI / LLM features in production: prompt injection defenses, agent guardrails, and AI-specific threat modeling. - Series B or earlier experience where you built or scaled a security function from limited scaffolding. - OSCP, OSWE, or comparable hands-on offensive security credentials. - CVE credit, published research, or contributions to open-source security tooling. - Experience designing security as customer-facing product (SSO domain verification, SCIM, IP allowlisting, audit logging, RBAC). - Background supporting enterprise customers in regulated industries. WHY THIS ROLE MATTERS Ivo's customers entrust us with their most sensitive contracts. As we move further upmarket and into more regulated industries, the strength of our application security program is becoming a direct driver of enterprise revenue and a key differentiator at the deal table. This role owns the technical security of the product itself. The person who fills it will shape what \"secure by default\" means at Ivo for years to come. COMPENSATION AND BENEFITS - Competitive Compensation: The USD base range for this role is $225,000 - $400,000 (+equity would be on top of this). Final offer details are determined based on experience, expertise, and overall fit. - Relocation and Visa Support: We also offer relocation assistance for successful applicants moving to SF, as well as support for visa and green card applications where applicable. - Medical benefits: Comprehensive medical, dental and vision plans to suit the needs of you and your family. - 401(k) Program: Plan for your future with access to our company-sponsored 401(k) program. - Commuter Benefits: We provide commuter benefits to help make getting to and from the office easier and more convenient. - Unlimited PTO: So you can take the time you need to recharge, stay healthy, and bring your best self to work. - Office Perks: Enjoy a vibrant Downtown San Francisco office with catered lunch provided five days a week, premium snacks and coffee, a gym located in the building, and a dog-friendly environment!", "summaryDescription" : "Lead Application Security Engineer at Ivo. Skills: Application security, Pen testing, Code review, Threat modeling. Own application security. Find and fix bugs", "createdAt" : "2026-06-14T02:13:59.428", "lastUpdated" : "2026-06-15T09:36:49.446", "ingestTimestamp" : "2026-06-14T02:13:59.428", "mongoId" : "6a2caf9b74d8ee00a09d75a9", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 225000, "salaryAnnualMax" : 400000, "salaryBand" : "200k+", "hasSalary" : true, "allSkills" : [ "Pen testing", "Code review", "Vulnerability hunting", "Threat modeling", "Pen test management", "Responsible disclosure", "Application security tooling", "SDLC integration", "Identity and access", "Incident investigation", "Enterprise security", "Secure coding", "Mentoring", "Application security", "Incident response", "Enterprise security reviews", "Product security", "Offensive security", "Vendor management", "Researcher communications", "Security tooling", "Identity management", "Access control", "Customer-facing features", "Responsible disclosure program", "OWASP Top 10", "Multi-tenant isolation", "API security", "Container security", "Kubernetes security", "AI/LLM security", "Prompt injection", "Agent guardrails", "AI threat modeling", "Regulated industries", "OSCP", "OSWE", "SAST", "DAST", "SCA", "Firebase Auth", "WorkOS" ], "skillCount" : 42, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Lead", "dataQualityScore" : 0.8888889, "_score" : 997.69556, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "SaaS", "llmIndustryConfidence" : 0.98 }, { "id" : "6a305119f292fd229cef9ea0", "title" : "Principal Software Engineer", "industry" : "IT", "salary" : { "min" : 450000.0, "max" : 750000.0, "currency" : "BRL", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Principal Software Engineer in Brazil, adjusted for executive seniority and full-time remote work in the technology industry." }, "location" : "Brazil", "locations" : [ "Brazil" ], "timestamp" : "2026-06-16T11:17:44.760", "fingerprint" : "63b8f56180bb3c1dbc187d198c77e6bb86a6aaa60449f36ee95169a92a03e337", "source" : "lever", "language" : "en", "applyUrl" : "https://jobs.lever.co/jobgether/7777cc6d-0d76-405d-9fd0-d687f7ce4e6a/apply", "externalId" : "7777cc6d-0d76-405d-9fd0-d687f7ce4e6a", "industryFunction" : { }, "structuredLocations" : [ { "country" : "Brazil", "continent" : "sa", "workMode" : "remote" } ], "locationText" : "Brazil", "employmentType" : "FULL_TIME", "experienceMinYears" : 8, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "Node.js, Fastify, React, MySQL, BigQuery, Google Cloud Platform, Cloud Run, Cloud Build, Cloud SQL, Load Balancing, TypeScript, Flutter, Golang, Rust", "professionalSkills" : [ "System design", "Architecture" ], "hardSkillsList" : [ "Server-side rendering", "Data architecture", "Infrastructure decisions", "Performance optimization", "ML pipelines" ], "hardSkills" : [ { "name" : "Server-side rendering", "level" : "intermediate" }, { "name" : "Data architecture", "level" : "intermediate" }, { "name" : "Infrastructure decisions", "level" : "intermediate" }, { "name" : "Performance optimization", "level" : "intermediate" }, { "name" : "ML pipelines", "level" : "intermediate" } ], "majorSkills" : "Web platform architecture, Server-side rendering, Data architecture, Cloud infrastructure", "majorSkillsList" : [ "Web platform architecture", "Server-side rendering", "Data architecture", "Cloud infrastructure" ], "coreResponsibilities" : "Own architecture, Own technical direction, Own scalability, Design server-side rendering, Maintain server-side rendering, Define data architecture, Optimize data architecture, Lead infrastructure decisions, Drive performance optimization, Oversee ad-tech integrations, Ensure systems support monetization, Maintain ML-driven pipelines, Optimize ML-driven pipelines, Collaborate with stakeholders", "teamCollaboration" : "Collaborate with stakeholders", "domainKnowledge" : "Ad-tech; Monetization workflows; ML applied to ad-tech", "domainList" : [ "ad-tech", "monetization-workflows", "ml-applied-to-ad-tech" ], "domainSpecificKnowledge" : [ "Ad-tech", "Monetization workflows", "ML applied to ad-tech" ], "toolProficiency" : [ "Cloudflare" ], "problemSolvingSkills" : "Performance optimization; Root cause analysis", "outcomesObjectives" : "Ensure system reliability; Support high-performance monetization", "qualificationsBasic" : "8+ years software engineering, Production-level web stacks, Node.js (TypeScript) production, React server-side rendering, MySQL schema design, MySQL indexing, MySQL query optimization, MySQL ORM usage, BigQuery large-scale data, Google Cloud Platform, Cloud Run, Cloud Build, Cloud SQL, Load balancing, System design, Architecture skills, Scalability focus, Performance focus, High-performance environments", "qualificationsPreferred" : "Ad-tech experience, Programmatic ads, Yield optimization, Affiliate systems, Cloudflare, Fastify 5, Flutter, Golang, Rust, ML applied to ad-tech", "remoteFriendly" : true, "workSiteFlexibility" : "Remote", "rawDescription" : "## Accountabilities Own the end-to-end architecture, technical direction, and scalability of a high-revenue web platform and mobile application. Design and maintain server-side rendering systems using Node.js, Fastify, and React in production environments. Define and optimize data architecture across MySQL and BigQuery, ensuring performance and scalability at large data volumes. Lead infrastructure decisions on Google Cloud Platform (Cloud Run, Cloud Build, Cloud SQL, Load Balancing) to ensure system reliability. Drive performance optimization initiatives across frontend, backend, and infrastructure layers where latency is critical. Oversee ad-tech integrations and ensure systems support high-performance monetization workflows. Maintain and optimize ML-driven pipelines used for ad-tech performance and revenue optimization. Collaborate directly with stakeholders to align technical execution with product and business goals. Requirements: 8+ years of experience in software engineering with strong production-level expertise in modern web stacks. Advanced experience with Node.js (TypeScript) in production environments. Strong expertise in React with server-side rendering architectures. Deep knowledge of MySQL, including schema design, indexing, query optimization, and ORM usage. Strong hands-on experience with BigQuery for large-scale data processing and analytics. Proven experience with Google Cloud Platform, including Cloud Run, Cloud Build, Cloud SQL, and load balancing. Strong system design and architecture skills with a focus on scalability and performance. Experience working in high-performance environments where optimization and reliability are critical. Nice to have: ad-tech experience (programmatic ads, yield optimization), affiliate systems (Anura, Everflow), Cloudflare, Fastify 5, Flutter, Golang or Rust, and ML applied to ad-tech. Benefits: Fully remote position with flexible working arrangements. Competitive contractor compensation aligned with senior-level expertise. Paid vacation and sick leave. Opportunity to work on a high-scale, revenue-generating platform with complex technical challenges. Exposure to advanced ad-tech systems, ML-driven optimization, and large-scale cloud infrastructure. High autonomy and ownership over architecture and technical decision-making. International work environment across US and European markets. ## Additional Information How Jobgether works: We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team. We appreciate your interest and wish you the best! Why Apply Through Jobgether? Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time. #LI-CL1", "summaryDescription" : "Principal Software Engineer. Skills: Web platform architecture, Server-side rendering, Data architecture, Cloud infrastructure. Own architecture. Own technical direction", "postedDate" : "2026-06-15T05:03:54.032", "createdAt" : "2026-06-15T05:03:54.032", "lastUpdated" : "2026-06-16T11:17:44.760", "ingestTimestamp" : "2026-06-16T03:21:32.787", "mongoId" : "6a305119f292fd229cef9ea0", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "Server-side rendering", "Data architecture", "Infrastructure decisions", "Performance optimization", "ML pipelines", "Web platform architecture", "Cloud infrastructure", "System design", "Architecture", "Ad-tech", "Monetization workflows", "ML applied to ad-tech", "Cloudflare" ], "skillCount" : 13, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Executive", "dataQualityScore" : 0.8888889, "_score" : 996.5258, "daysOld" : 1, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2a5de674d8ee00a061aad8", "title" : "Principal Security Software Engineer", "company" : "Roblox", "industry" : "Technology", "salary" : { "min" : 385050.0, "max" : 443200.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "San Mateo, CA, United States", "locations" : [ "San Mateo", "CA", "United States" ], "timestamp" : "2026-06-14T20:30:56.813", "fingerprint" : "8f45edfdbd00a312f0b83c2896de50c6d85b20efffd5ed7816c72260246755a6", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://careers.roblox.com/jobs/7983905?gh_jid=7983905", "externalId" : "7983905", "industryFunction" : { }, "structuredLocations" : [ { "city" : "San Mateo", "state" : "California", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "hybrid", "geo" : "37.4969040,-122.3330573" } ], "locationText" : "San Mateo, California, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 10, "experienceMaxYears" : 99, "experienceLevel" : "Principal", "technicalSkills" : "OAuth 2.0, SCIM 2.0, SAML 2.0, FIDO2/WebAuthn, Passkeys, SPIFFE/SPIRE, OPA/Rego, Cedar, Zanzibar/ReBAC, Python, Go, Rust", "professionalSkills" : [ "System design", "Security strategy" ], "hardSkillsList" : [ "Policy enforcement engines", "Security integrations", "SSO federation", "SCIM provisioning/deprovisioning", "OAuth 2.0 authorization", "Token lifecycle management", "Security automation", "Security controls", "Session management", "Audit logging", "Rate limiting", "Secret storage", "Threat modeling", "Zero trust architecture", "Least-privilege access" ], "softSkillsList" : [ "Strategic Thinker", "Comfortable with Ambiguity" ], "hardSkills" : [ { "name" : "Policy enforcement engines", "level" : "intermediate" }, { "name" : "Security integrations", "level" : "intermediate" }, { "name" : "SSO federation", "level" : "intermediate" }, { "name" : "SCIM provisioning/deprovisioning", "level" : "intermediate" }, { "name" : "OAuth 2.0 authorization", "level" : "intermediate" }, { "name" : "Token lifecycle management", "level" : "intermediate" }, { "name" : "Security automation", "level" : "intermediate" }, { "name" : "Security controls", "level" : "intermediate" }, { "name" : "Session management", "level" : "intermediate" }, { "name" : "Audit logging", "level" : "intermediate" }, { "name" : "Rate limiting", "level" : "intermediate" }, { "name" : "Secret storage", "level" : "intermediate" }, { "name" : "Threat modeling", "level" : "intermediate" }, { "name" : "Zero trust architecture", "level" : "intermediate" }, { "name" : "Least-privilege access", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Strategic Thinker" }, { "name" : "Comfortable with Ambiguity" } ], "majorSkills" : "Security Software Engineering, Policy as Code, Authentication Protocols", "majorSkillsList" : [ "Security Software Engineering", "Policy as Code", "Authentication Protocols" ], "coreResponsibilities" : "Build identity and access systems, Design integrations across IAM ecosystem, Implement integrations across IAM ecosystem, Own integrations across IAM ecosystem, Lead security automation, Develop production-quality tools, Develop services for security policy enforcement, Replace manual workflows, Surface actionable security signals, Drive secure-by-design implementations, Embed security controls into enterprise systems, Embed security controls into developer workflows, Evaluate vendor platforms, Extend vendor platforms, Build custom integrations for vendor platforms, Build connectors for vendor platforms, Build automation layers for vendor platforms", "teamCollaboration" : "Partner with security professionals; Work cross-functionally; Partner with Corporate Engineering; Partner with DevOps; Partner with Product teams; Work with direct team; Work with cross-functional partners", "domainKnowledge" : "Enterprise Security; Corporate infrastructure; IAM ecosystem; Policy-as-code; Authorization frameworks; Authentication protocols; Zero trust architecture; Least-privilege access", "domainList" : [ "enterprise-security", "corporate-infrastructure", "iam-ecosystem", "policy-as-code", "authorization-frameworks", "authentication-protocols", "zero-trust-architecture", "least-privilege-access" ], "domainSpecificKnowledge" : [ "Enterprise Security", "Corporate infrastructure", "IAM ecosystem", "Policy-as-code", "Authorization frameworks", "Authentication protocols", "Zero trust architecture", "Least-privilege access" ], "problemSolvingSkills" : "Debug complex authentication and authorization issues", "qualificationsBasic" : "10+ years of relevant professional experience combining SWE and security, Deep understanding of Human and Machine Identity and Authentication protocols, Experience with one or more policy-as-code or authorization frameworks, Proficiency in at least one systems or backend language, Proficiency with security-relevant system design, Experience in Threat modeling for authentication and authorization systems, Understanding of Zero trust architecture and least-privilege access patterns", "qualificationsPreferred" : "Support future H-1B sponsorship", "workSiteFlexibility" : "Hybrid", "rawDescription" : "Every day, tens of millions of people come to Roblox to explore, create, play, learn, and connect with friends in 3D immersive digital experiences– all created by our global community of developers and creators. At Roblox, we’re building the tools and platform that empower our community to bring any experience that they can imagine to life. Our vision is to reimagine the way people come together, from anywhere in the world, and on any device. We’re on a mission to connect a billion people with optimism and civility, and looking for amazing talent to help us get there. A career at Roblox means you’ll be working to shape the future of human interaction, solving unique technical challenges at scale, and helping to create safer, more civil shared experiences for everyone. As a Principal Security Software Engineer in the Enterprise Security team, you will advance Roblox's Enterprise Security strategy by building the systems and integrations that protect Roblox's corporate infrastructure. Where traditional security engineers evaluate and deploy vendor solutions, you will design and build production-grade security software - Identity and Access governance, policy enforcement engines, and security integrations that scale with Roblox's business. You'll partner with security professionals across InfoSec and work cross-functionally with Corporate Engineering, DevOps, and Product teams to drive security initiatives. You will: Build identity and access systems: Design, implement, and own integrations across Roblox's IAM ecosystem, including SSO federation, SCIM provisioning/deprovisioning pipelines, OAuth 2.0 authorization servers, and token lifecycle management. Lead security automation: Develop production-quality tools and services that enforce security policies at scale, replace manual workflows, and surface actionable signals Drive secure-by-design implementations: Partner with Corporate Engineering, DevOps, and product teams to embed security controls into enterprise systems and developer workflows. Evaluate and extend vendor platforms: Assess commercial IAM and security tooling, then build the custom integrations, connectors, and automation layers that make them work at Roblox's scale. You have: Deep understanding of Human and Machine Identity and Authentication protocols like OAuth 2.0, SCIM 2.0, SAML 2.0, Transaction tokens, FIDO2/WebAuthn and Passkeys, SPIFFE/SPIRE Experience with one or more policy-as-code or authorization frameworks (OPA/Rego, Cedar, Zanzibar/ReBAC) Proficiency in at least one systems or backend language: Python, Go, Rust Proficiency with security-relevant system design: session management, audit logging, rate limiting, secret storage Experience in Threat modeling for authentication and authorization systems Understanding of Zero trust architecture and least-privilege access patterns 10+ years of relevant professional experience combining SWE and security You are: Engineer First: You approach problems with code and systems thinking, building reliable security platforms that engineering teams can depend on Protocol Fluent: You have hands-on experience implementing identity standards and can navigate RFC-level details to debug complex authentication and authorization issues. Collaborative: You love working with your direct team and cross-functional partners across engineering, DevOps, and business teams to deliver security outcomes without slowing them down. Strategic Thinker: You define clear technical requirements and assess commercial solutions to inform build vs. buy decisions, balancing security rigor with engineering pragmatism. Comfortable with Ambiguity: You gather data, navigate complex situations, and make sound technical decisions even when facing incomplete information or unclear requirements. For roles that are based at our headquarters in San Mateo, CA: The starting base pay for this position is as shown below. The actual base pay is dependent upon a variety of job-related factors such as professional background, training, work experience, location, business needs and market demand. Therefore, in some circumstances, the actual salary could fall outside of this expected range. This pay range is subject to change and may be modified in the future. All full-time employees are also eligible for equity compensation and for benefits as described on this page. Annual Salary Range $385,050—$443,200 USD Roles that are based in an office are onsite Tuesday, Wednesday, and Thursday, with optional presence on Monday and Friday (unless otherwise noted). Roblox provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws. Roblox also provides reasonable accommodations to candidates with qualifying disabilities or religious beliefs during the recruiting process. For US based roles only, please note the Company may not be able to employ candidates for this role who have United States work authorization related to certain U. S. visa categories, or support future H-1B sponsorship at this time.", "summaryDescription" : "Principal Security Software Engineer at Roblox. Skills: Security Software Engineering, Policy as Code, Authentication Protocols. Build identity and access systems. Design integrations across IAM ecosystem", "postedDate" : "2026-06-11T21:00:53.139", "createdAt" : "2026-06-11T21:00:53.139", "lastUpdated" : "2026-06-14T20:30:56.813", "ingestTimestamp" : "2026-06-11T21:00:53.139", "mongoId" : "6a2a5de674d8ee00a061aad8", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 385050, "salaryAnnualMax" : 443200, "salaryBand" : "200k+", "hasSalary" : true, "allSkills" : [ "Policy enforcement engines", "Security integrations", "SSO federation", "SCIM provisioning/deprovisioning", "OAuth 2.0 authorization", "Token lifecycle management", "Security automation", "Security controls", "Session management", "Audit logging", "Rate limiting", "Secret storage", "Threat modeling", "Zero trust architecture", "Least-privilege access", "Strategic Thinker", "Comfortable with Ambiguity", "Security Software Engineering", "Policy as Code", "Authentication Protocols", "System design", "Security strategy", "Enterprise Security", "Corporate infrastructure", "IAM ecosystem", "Policy-as-code", "Authorization frameworks", "Authentication protocols" ], "skillCount" : 28, "jobCategory" : "engineering", "jobSubcategory" : "software-engineering", "dataQualityScore" : 1.0, "_score" : 994.112, "daysOld" : 2, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology" }, { "id" : "6a3098d2f292fd229c0e6896", "title" : "Senior Security Analyst- Application Security & DevSecOps", "company" : "Software Mind", "industry" : "Information Technology And Services", "salary" : { "min" : 2.7E7, "max" : 3.9E7, "currency" : "CRC", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Senior Security Analyst in San José, Costa Rica, adjusted for the technology industry and senior experience level." }, "location" : "San José, San José Province, CR", "locations" : [ "San José", "San José Province", "CR" ], "certifications" : [ "CSSLP", "GWAPT", "CISSP", "Cloud security certifications" ], "timestamp" : "2026-06-16T14:18:28.225", "fingerprint" : "95cac723a13694e715e41a9032668d31ddd1080123b26d8cd3e455cf7e517e96", "source" : "smartrecruiters", "language" : "en", "applyUrl" : "https://jobs.smartrecruiters.com/SoftwareMind/744000132287444--8pp-senior-security-analyst-application-security-devsecops", "externalId" : "744000132287444", "industryFunction" : { }, "structuredLocations" : [ { "city" : "San José", "state" : "San José Province", "country" : "Costa Rica", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "9.9327707,-84.0796144" } ], "locationText" : "San José, San José Province, Costa Rica", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "mid", "technicalSkills" : "SAST, DAST, SCA, CI/CD, Azure DevOps, Bitbucket, AWS, Azure, M365, WAF", "professionalSkills" : [ "Risk assessment", "System design", "Architecture review", "Vendor risk management", "Compliance alignment" ], "hardSkillsList" : [ "Secure coding", "Threat modeling", "Policy-as-code", "Infrastructure-as-code", "Configuration hardening", "Network segmentation", "Code signing" ], "hardSkills" : [ { "name" : "Secure coding", "level" : "intermediate" }, { "name" : "Threat modeling", "level" : "intermediate" }, { "name" : "Policy-as-code", "level" : "intermediate" }, { "name" : "Infrastructure-as-code", "level" : "intermediate" }, { "name" : "Configuration hardening", "level" : "intermediate" }, { "name" : "Network segmentation", "level" : "intermediate" }, { "name" : "Code signing", "level" : "intermediate" } ], "majorSkills" : "Application Security, DevSecOps, Secure SDLC, Cloud Security", "majorSkillsList" : [ "Application Security", "DevSecOps", "Secure SDLC", "Cloud Security" ], "coreResponsibilities" : "Partner with development teams, Embed secure coding practices, Assess development practices, Identify gaps, Drive maturity roadmap, Lead developer enablement initiatives, Provide secure coding guidance, Conduct threat modeling, Manage security champions program, Integrate SAST, Integrate DAST, Integrate SCA, Integrate secrets scanning, Tune SAST, Tune DAST, Tune SCA, Tune secrets scanning, Deliver fast feedback, Evaluate prospective products, Evaluate platforms, Evaluate SaaS tools, Evaluate developer tooling, Confirm alignment with best practices, Conduct architecture reviews, Conduct design reviews, Assess authentication, Assess authorization, Assess data handling, Assess encryption, Assess logging, Assess multi-tenancy, Review third-party risk, Review supply chain risk, Define conditions for safe use, Produce risk-based assessments, Produce recommendations, Align product reviews with SOC 2, Align product reviews with control requirements, Implement policy-as-code guardrails, Implement infrastructure-as-code security controls, Drive cloud posture improvements, Harden configurations, Align with CIS benchmarks, Implement WAF, Implement network segmentation, Establish supply chain security controls, Govern dependencies, Implement code signing", "teamCollaboration" : "Partner with development teams; Coach developers; Present risk to technical audiences; Present risk to executive audiences", "projectManagementSkills" : [ "Roadmap planning" ], "domainKnowledge" : "Application Security; DevSecOps; Secure SDLC; Cloud-native architecture; Supply chain risk; NIST SSDF; OWASP SAMM; OWASP ASVS; BSIMM; CIS benchmarks; SOC 2; ISO 27001; AI/ML security", "domainList" : [ "application-security", "devsecops", "secure-sdlc", "cloud-native-architecture", "supply-chain-risk", "nist-ssdf", "owasp-samm", "owasp-asvs", "bsimm", "cis-benchmarks", "soc-2", "iso-27001", "ai-ml-security" ], "domainSpecificKnowledge" : [ "Application Security", "DevSecOps", "Secure SDLC", "Cloud-native architecture", "Supply chain risk", "NIST SSDF", "OWASP SAMM", "OWASP ASVS", "BSIMM", "CIS benchmarks", "SOC 2", "ISO 27001", "AI/ML security" ], "toolProficiency" : [ "Azure DevOps", "Bitbucket", "SAST tools", "DAST tools", "SCA tools", "Secrets scanning" ], "communicationSkills" : "Risk presentation", "problemSolvingSkills" : "Risk assessment; Root cause analysis", "qualificationsBasic" : "5+ years of experience in Application Security, 5+ years of experience in DevSecOps, Hands-on AppSec background, Hands-on DevSecOps background, SAST/DAST/SCA experience, CI/CD pipeline security experience, Secrets management experience, Product security review experience, Technology security review experience, Experience with CI/CD tooling, Experience with source control tooling, Cloud security experience in AWS, Cloud security experience in Azure, +90% English proficiency", "qualificationsPreferred" : "Experience in a SOC 2 environment, Experience in an ISO 27001 environment, Threat modeling experience, AI/ML security considerations, AI/ML governance considerations", "remoteFriendly" : true, "workSiteFlexibility" : "Flexible", "rawDescription" : "We are Software Mind, an awesome team of engineers who are ready to ramp up any top-notch company’s projects! Our aim? To always be one step ahead. Become part of a multicultural company in constant growth with an excellent work environment certified by Great Place To Work! Overview Software Mind is seeking qualified candidates to fill the role of Senior Security Analyst- Application Security & DevSecOps In addition to a competitive salary rate and a positive work environment, we are committed to delivering high-quality technology solutions, we also offer: * Flexible schedules * An authentic work-life balance * Payment in US Dollars Senior Security Analyst – Application Security & DevSecOps About the Role We are seeking a Senior Security Analyst with a strong background in Application Security and DevSecOps , focused on embedding security throughout the software development lifecycle. This is not a traditional SecOps monitoring role — the ideal candidate is someone who partners closely with engineering teams, drives security program maturity, and can assess technology risk at both a technical and strategic level. ## Qualifications Key Responsibilities SSDLC Maturity & Developer Enablement * Partner with development teams to embed secure coding practices throughout the SDLC, shifting security from a final gate to a shared, integrated responsibility * Assess current development practices against Secure SDLC standards, identify gaps, and drive a phased maturity roadmap with measurable milestones * Lead developer enablement initiatives — secure coding guidance, threat modeling, and a security champions program — that build durable capability within engineering teams * Integrate and tune SAST, DAST, SCA, and secrets scanning in CI/CD pipelines (Azure DevOps, Bitbucket) to deliver fast, in-workflow feedback with minimal friction Product & Technology Security Review * Evaluate prospective products, platforms, SaaS tools, and developer tooling to confirm alignment with security best practices before adoption * Conduct architecture and design reviews, assessing authentication, authorization, data handling, encryption, logging, and multi-tenancy considerations * Review third-party and supply chain risk — dependencies, integrations, AI/ML components, and vendor security posture — and define conditions for safe use * Produce clear, risk-based assessments and recommendations (approve, approve-with-conditions, or reject) for engineering and security leadership * Partner with vendor risk and compliance functions to align product reviews with SOC 2 and broader control requirements Cloud & Pipeline Security * Implement policy-as-code guardrails and infrastructure-as-code security controls across Azure/M365 cloud environments * Drive cloud posture improvements — configuration hardening, CIS benchmark alignment, WAF, and network segmentation * Establish supply chain security controls including dependency governance and code signing What We're Looking For Required * 5+ years of experience in Application Security, DevSecOps, or a similar role * Demonstrated experience maturing an engineering organization through Secure SDLC adoption — not just deploying tools * Hands-on AppSec and DevSecOps background: SAST/DAST/SCA, CI/CD pipeline security, secrets management * Strong product and technology security review experience — ability to assess a new platform or tool and articulate concrete risks and mitigations * Experience with CI/CD and source control tooling (Azure DevOps, Bitbucket, or equivalents) * Familiarity with secure development frameworks (NIST SSDF, OWASP SAMM/ASVS, BSIMM) * Cloud security experience in AWS and/or Azure * Strong collaboration and communication skills — able to coach developers and present risk to both technical and executive audiences * +90% English proficiency (written and spoken, minimum B2 level) ## Additional Information Preferred * Experience in a SOC 2 and/or ISO 27001 environment * Threat modeling experience * Exposure to AI/ML security and governance considerations * Relevant certifications: CSSLP, GWAPT, CISSP, or cloud security certifications", "summaryDescription" : "Senior Security Analyst- Application Security & DevSecOps at Software Mind. Skills: Application Security, DevSecOps, Secure SDLC, Cloud Security. Partner with development teams. Embed secure coding practices", "postedDate" : "2026-06-15T21:23:28.000", "createdAt" : "2026-06-16T03:35:05.388", "lastUpdated" : "2026-06-16T14:18:28.225", "ingestTimestamp" : "2026-06-16T03:35:05.388", "mongoId" : "6a3098d2f292fd229c0e6896", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "Secure coding", "Threat modeling", "Policy-as-code", "Infrastructure-as-code", "Configuration hardening", "Network segmentation", "Code signing", "Application Security", "DevSecOps", "Secure SDLC", "Cloud Security", "Risk assessment", "System design", "Architecture review", "Vendor risk management", "Compliance alignment", "Roadmap planning", "Cloud-native architecture", "Supply chain risk", "NIST SSDF", "OWASP SAMM", "OWASP ASVS", "BSIMM", "CIS benchmarks", "SOC 2", "ISO 27001", "AI/ML security", "CSSLP", "GWAPT", "CISSP", "Cloud security certifications", "Azure DevOps", "Bitbucket", "SAST tools", "DAST tools", "SCA tools", "Secrets scanning" ], "skillCount" : 37, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 1.0, "_score" : 989.3984, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a3089aaf292fd229c094820", "title" : "Senior Security Analyst- Application Security & DevSecOps", "company" : "Software Mind", "industry" : "Information Technology And Services", "salary" : { "min" : 2.85E7, "max" : 4.25E7, "currency" : "CRC", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Senior Security Analyst in San José, Costa Rica, adjusted for the technology industry and senior experience level." }, "location" : "San José, San José Province, CR", "locations" : [ "San José", "San José Province", "CR" ], "certifications" : [ "CSSLP", "GWAPT", "CISSP", "Cloud security certifications" ], "timestamp" : "2026-06-16T11:44:59.994", "fingerprint" : "4c5dac592989d57061d87c6ddac65517b5402d56d455db92a6350bb043974590", "source" : "smartrecruiters", "language" : "en", "applyUrl" : "https://jobs.smartrecruiters.com/SoftwareMind/744000132287444--8pp-senior-security-analyst-application-security-devsecops", "externalId" : "744000132287444", "industryFunction" : { }, "structuredLocations" : [ { "city" : "San José", "state" : "San José Province", "country" : "Costa Rica", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "9.9327707,-84.0796144" } ], "locationText" : "San José, San José Province, Costa Rica", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "mid", "technicalSkills" : "SAST, DAST, SCA, CI/CD, Azure DevOps, Bitbucket, AWS, Azure, M365, WAF", "professionalSkills" : [ "Risk assessment", "System design", "Architecture review", "Vendor security posture" ], "hardSkillsList" : [ "Secure coding practices", "Threat modeling", "Policy-as-code", "Infrastructure-as-code", "Configuration hardening", "CIS benchmark alignment", "Network segmentation", "Dependency governance", "Code signing" ], "hardSkills" : [ { "name" : "Secure coding practices", "level" : "intermediate" }, { "name" : "Threat modeling", "level" : "intermediate" }, { "name" : "Policy-as-code", "level" : "intermediate" }, { "name" : "Infrastructure-as-code", "level" : "intermediate" }, { "name" : "Configuration hardening", "level" : "intermediate" }, { "name" : "CIS benchmark alignment", "level" : "intermediate" }, { "name" : "Network segmentation", "level" : "intermediate" }, { "name" : "Dependency governance", "level" : "intermediate" }, { "name" : "Code signing", "level" : "intermediate" } ], "majorSkills" : "Application Security, DevSecOps, Secure SDLC, Cloud Security", "majorSkillsList" : [ "Application Security", "DevSecOps", "Secure SDLC", "Cloud Security" ], "coreResponsibilities" : "Partner with development teams, Embed secure coding practices, Assess development practices, Identify gaps, Drive maturity roadmap, Lead developer enablement initiatives, Provide secure coding guidance, Conduct threat modeling, Manage security champions program, Integrate SAST, Integrate DAST, Integrate SCA, Integrate secrets scanning, Tune SAST, Tune DAST, Tune SCA, Tune secrets scanning, Deliver fast feedback, Evaluate prospective products, Evaluate platforms, Evaluate SaaS tools, Evaluate developer tooling, Confirm alignment with best practices, Conduct architecture reviews, Conduct design reviews, Assess authentication, Assess authorization, Assess data handling, Assess encryption, Assess logging, Assess multi-tenancy, Review third-party risk, Review supply chain risk, Define conditions for safe use, Produce risk-based assessments, Produce recommendations, Align product reviews, Implement policy-as-code guardrails, Implement IaC security controls, Drive cloud posture improvements, Establish supply chain security controls", "teamCollaboration" : "Partner with development teams; Coach developers; Present risk to technical audiences; Present risk to executive audiences", "projectManagementSkills" : [ "Roadmap planning" ], "domainKnowledge" : "Secure SDLC standards; NIST SSDF; OWASP SAMM; OWASP ASVS; BSIMM; Cloud security; Supply chain risk; AI/ML components; Vendor security posture; SOC 2; CIS benchmarks", "domainList" : [ "secure-sdlc-standards", "nist-ssdf", "owasp-samm", "owasp-asvs", "bsimm", "cloud-security", "supply-chain-risk", "ai-ml-components", "vendor-security-posture", "soc-2", "cis-benchmarks" ], "domainSpecificKnowledge" : [ "Secure SDLC standards", "NIST SSDF", "OWASP SAMM", "OWASP ASVS", "BSIMM", "Cloud security", "Supply chain risk", "AI/ML components", "Vendor security posture", "SOC 2", "CIS benchmarks" ], "toolProficiency" : [ "Azure DevOps", "Bitbucket", "SAST tools", "DAST tools", "SCA tools", "Secrets scanning" ], "communicationSkills" : "Risk presentation", "problemSolvingSkills" : "Risk assessment; Root cause analysis", "outcomesObjectives" : "Drive phased maturity roadmap; Build durable capability", "qualificationsBasic" : "5+ years of experience in Application Security, 5+ years of experience in DevSecOps, Hands-on AppSec background, Hands-on DevSecOps background, SAST/DAST/SCA experience, CI/CD pipeline security experience, Secrets management experience, Product security review experience, Technology security review experience, Experience with CI/CD tooling, Experience with source control tooling, Cloud security experience in AWS, Cloud security experience in Azure, +90% English proficiency", "qualificationsPreferred" : "Experience in a SOC 2 environment, Experience in a ISO 27001 environment, Threat modeling experience, AI/ML security experience, AI/ML governance experience", "remoteFriendly" : true, "workSiteFlexibility" : "Flexible", "rawDescription" : "We are Software Mind, an awesome team of engineers who are ready to ramp up any top-notch company’s projects! Our aim? To always be one step ahead. Become part of a multicultural company in constant growth with an excellent work environment certified by Great Place To Work! Overview Software Mind is seeking qualified candidates to fill the role of Senior Security Analyst- Application Security & DevSecOps In addition to a competitive salary rate and a positive work environment, we are committed to delivering high-quality technology solutions, we also offer: * Flexible schedules * An authentic work-life balance * Payment in US Dollars Senior Security Analyst – Application Security & DevSecOps About the Role We are seeking a Senior Security Analyst with a strong background in Application Security and DevSecOps , focused on embedding security throughout the software development lifecycle. This is not a traditional SecOps monitoring role — the ideal candidate is someone who partners closely with engineering teams, drives security program maturity, and can assess technology risk at both a technical and strategic level. ## Qualifications Key Responsibilities SSDLC Maturity & Developer Enablement * Partner with development teams to embed secure coding practices throughout the SDLC, shifting security from a final gate to a shared, integrated responsibility * Assess current development practices against Secure SDLC standards, identify gaps, and drive a phased maturity roadmap with measurable milestones * Lead developer enablement initiatives — secure coding guidance, threat modeling, and a security champions program — that build durable capability within engineering teams * Integrate and tune SAST, DAST, SCA, and secrets scanning in CI/CD pipelines (Azure DevOps, Bitbucket) to deliver fast, in-workflow feedback with minimal friction Product & Technology Security Review * Evaluate prospective products, platforms, SaaS tools, and developer tooling to confirm alignment with security best practices before adoption * Conduct architecture and design reviews, assessing authentication, authorization, data handling, encryption, logging, and multi-tenancy considerations * Review third-party and supply chain risk — dependencies, integrations, AI/ML components, and vendor security posture — and define conditions for safe use * Produce clear, risk-based assessments and recommendations (approve, approve-with-conditions, or reject) for engineering and security leadership * Partner with vendor risk and compliance functions to align product reviews with SOC 2 and broader control requirements Cloud & Pipeline Security * Implement policy-as-code guardrails and infrastructure-as-code security controls across Azure/M365 cloud environments * Drive cloud posture improvements — configuration hardening, CIS benchmark alignment, WAF, and network segmentation * Establish supply chain security controls including dependency governance and code signing What We're Looking For Required * 5+ years of experience in Application Security, DevSecOps, or a similar role * Demonstrated experience maturing an engineering organization through Secure SDLC adoption — not just deploying tools * Hands-on AppSec and DevSecOps background: SAST/DAST/SCA, CI/CD pipeline security, secrets management * Strong product and technology security review experience — ability to assess a new platform or tool and articulate concrete risks and mitigations * Experience with CI/CD and source control tooling (Azure DevOps, Bitbucket, or equivalents) * Familiarity with secure development frameworks (NIST SSDF, OWASP SAMM/ASVS, BSIMM) * Cloud security experience in AWS and/or Azure * Strong collaboration and communication skills — able to coach developers and present risk to both technical and executive audiences * +90% English proficiency (written and spoken, minimum B2 level) ## Additional Information Preferred * Experience in a SOC 2 and/or ISO 27001 environment * Threat modeling experience * Exposure to AI/ML security and governance considerations * Relevant certifications: CSSLP, GWAPT, CISSP, or cloud security certifications", "summaryDescription" : "Senior Security Analyst- Application Security & DevSecOps at Software Mind. Skills: Application Security, DevSecOps, Secure SDLC, Cloud Security. Partner with development teams. Embed secure coding practices", "postedDate" : "2026-06-15T21:23:28.000", "createdAt" : "2026-06-16T01:41:40.834", "lastUpdated" : "2026-06-16T11:44:59.994", "ingestTimestamp" : "2026-06-16T01:41:40.834", "mongoId" : "6a3089aaf292fd229c094820", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "Secure coding practices", "Threat modeling", "Policy-as-code", "Infrastructure-as-code", "Configuration hardening", "CIS benchmark alignment", "Network segmentation", "Dependency governance", "Code signing", "Application Security", "DevSecOps", "Secure SDLC", "Cloud Security", "Risk assessment", "System design", "Architecture review", "Vendor security posture", "Roadmap planning", "Secure SDLC standards", "NIST SSDF", "OWASP SAMM", "OWASP ASVS", "BSIMM", "Cloud security", "Supply chain risk", "AI/ML components", "SOC 2", "CIS benchmarks", "CSSLP", "GWAPT", "CISSP", "Cloud security certifications", "Azure DevOps", "Bitbucket", "SAST tools", "DAST tools", "SCA tools", "Secrets scanning" ], "skillCount" : 38, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 1.0, "_score" : 989.3984, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2cf98c74d8ee00a0a9ad34", "title" : "Principal Software Engineer", "company" : "Arlo", "industry" : "Engineering & Product", "salary" : { "min" : 250000.0, "max" : 350000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Principal Software Engineer in New York, adjusted for executive seniority in the healthcare industry." }, "location" : "New York City", "locations" : [ "New York City" ], "timestamp" : "2026-06-16T06:45:56.490", "fingerprint" : "6855f96ef9f72f8893b6c10c6e4b64218810aa91aa70c6b5c91812e4339ba116", "source" : "ashby", "language" : "en", "applyUrl" : "https://jobs.ashbyhq.com/arlo/61c8131d-96e0-40c0-98cc-16d0c761ab68/application", "externalId" : "61c8131d-96e0-40c0-98cc-16d0c761ab68", "industryFunction" : { }, "structuredLocations" : [ { "city" : "New York", "state" : "New York", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "40.7127281,-74.0060152" } ], "locationText" : "New York, New York, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "rawDescription" : "Most of what makes American healthcare expensive isn’t medical care. It’s the machinery wrapped around it: middlemen taking a cut, fraud nobody stops, and billing systems designed to fight over payment instead of deliver care. The result is higher premiums, denied claims, surprise bills, and a system patients increasingly experience as adversarial. Arlo is rebuilding health insurance for small businesses from first principles: making sure as much of every premium dollar as possible goes to care instead of getting absorbed by the system around it. We do that by identifying fraud earlier, steering members toward higher-quality and lower-cost care, automating operational overhead, and eliminating vendors whose business exists mostly to take a cut. AI is the foundation that makes this work. We use it across underwriting, operations, clinical programs, and member experience to build an insurer that becomes more efficient as the technology improves. We’re already operating at meaningful scale: profitable, hundreds of millions in premiums, tens of thousands of members covered, and growing quickly through brokers, employers, and partners. Backed by Upfront Ventures, 8VC, and General Catalyst, with a team from Palantir, YC companies, and longtime healthcare operators. About the Role We’re looking for Principal Software Engineers to help build the systems that power an AI-native insurance company. Insurance operations are sprawling: underwriting, claims, premium finance, broker operations, member support, care navigation, and more. Most companies run these functions through fragmented vendors, legacy software, and manual workflows. At Arlo, we build our own infrastructure. You’ll work closely with operational teams and AI Forward Deployed Engineers to turn real business workflows into AI-native products and internal platforms. The goal isn’t to bolt AI onto existing software; it’s to redesign how the work happens altogether. We care about engineers who want to own real operational problems end-to-end: product architecture, backend systems, frontend experiences, AI workflows, and production deployment. What You Will Do - Design and ship full-stack products across the insurance lifecycle, working across React, React Native, TypeScript, Python, Postgres, and modern AI infrastructure. - Build AI-native underwriting systems that synthesize risk, structure messy data, and assist decision-making. - Create claims tooling that automates review, coordination, and document processing workflows. - Develop internal operational platforms for teams managing millions in premiums and healthcare spend. - Build member-facing products that combine conversational AI, navigation, and real-time healthcare workflows. - Design retrieval, memory, and evaluation systems that improve reliability and operational performance over time - Work directly with operational teams to identify bottlenecks and rapidly ship systems that eliminate manual work. - Own projects end-to-end: product architecture, backend systems, frontend experiences, AI integration, and production deployment. The work is highly applied. Success is measured by whether the systems you build become core infrastructure for how the company operates, reducing operational overhead, improving member experience, and allowing teams to scale far beyond traditional insurance companies. What We’re Looking For Principal Engineers at Arlo operate across functions, not just within them. In addition to owning large technical systems, Principal Engineers identify opportunities to redesign how the company itself operates. They work across underwriting, claims, finance, operations, and member experience to build shared platforms, AI infrastructure, and workflows that become foundational to the business. This role is deeply hands-on. Principal engineers are expected to ship quickly, work directly with operators, and build systems that create leverage across the organization, not just within a single team. You Have: - Deep experience designing and scaling complex software systems - Exceptional judgment across product, engineering, and operational tradeoffs - A track record of leading highly ambiguous, cross-functional initiatives - Strong intuition for where AI can fundamentally change workflows and business operations - The ability to simplify complex organizational problems into scalable systems The expectation for Principal Engineers is to leverage the organization: building the infrastructure, workflows, and systems that reshape how multiple parts of the company operate together. Nice to Haves - Experience in regulated industries (healthcare, fintech, etc.) - Strong sense of design and attention to UI detail Compensation $275,000 – $300,000 base + equity WHY JOIN ARLO: - High ownership: You’ll get real responsibility from day one—our high-trust team empowers you to run with big problems and shape core parts of the company. - Join an important mission: Your work directly influences how people access care and improves lives at scale. - Growth & expansion: We’re moving fast, and as we grow, your scope will grow with us—new challenges, bigger opportunities, and rapid career velocity. - Apply AI to a problem that matters: Instead of optimizing ads or cutting labor costs, you’ll use AI to fundamentally reimagine how people get healthcare. - High pace, high collaboration: We operate with velocity, first-principles thinking, and a team that works closely, openly, and with ambition. Exact compensation inclusive of salary and any bonuses is determined based on a number of factors including experience and skill level, location, and qualifications which are assessed during the interview process. Arlo is an equal opportunity employer. We do not discriminate based on age, race, color, creed or religion, national origin, sexual orientation, gender identity or expression, military status, sex, disability, predisposing genetic characteristics, marital status, familial status, status as a victim of domestic violence, or arrest or conviction record, as defined under New York State law. \uD83D\uDD12 Your safety matters to us. If you're selected to move forward in our hiring process, you'll hear directly from a member of our Recruiting team via an @joinarlo.com email address. We will never ask for personal or financial information outside of our formal onboarding process. When in doubt, please reach out to us to verify at: recruiting@joinarlo.com http://joinarlo.com.", "summaryDescription" : "Principal Software Engineer at Arlo", "createdAt" : "2026-06-14T19:33:53.722", "lastUpdated" : "2026-06-16T06:45:56.490", "ingestTimestamp" : "2026-06-14T19:33:53.722", "mongoId" : "6a2cf98c74d8ee00a0a9ad34", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 250000, "salaryAnnualMax" : 350000, "salaryBand" : "200k+", "hasSalary" : true, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Executive", "dataQualityScore" : 0.7777778, "_score" : 982.82983, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Healthcare", "llmIndustryConfidence" : 0.98 }, { "id" : "6a2c6af174d8ee00a090f54c", "title" : "Principal Security Operation Engineer", "company" : "Bybit", "salary" : { "min" : 360000.0, "max" : 600000.0, "currency" : "MYR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for Principal Security Operation Engineer in Kuala Lumpur, Malaysia, adjusted for executive seniority in the FinTech industry." }, "location" : "Kuala Lumpur Tech Office", "locations" : [ "Kuala Lumpur Tech Office" ], "timestamp" : "2026-06-15T21:45:31.392", "fingerprint" : "399a2716bf5c83611d693ec527b549bb89ebb6920bd3a5a9eb9619ce8526ba44", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.eu.greenhouse.io/bybit/jobs/4882185101", "externalId" : "4882185101", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Kuala Lumpur", "country" : "Malaysia", "continent" : "as", "source" : "llm", "workMode" : "onsite", "geo" : "3.1516964,101.6942371" } ], "locationText" : "Kuala Lumpur, Malaysia", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "rawDescription" : "About Us Established in 2018, Bybit is one of the world’s leading cryptocurrency exchanges and digital financial platforms, serving over 80 million users across more than 200 countries and regions. Powered by world-class technology and a user-first mindset, Bybit delivers a seamless ecosystem across trading, payments, wealth management, custody, institutional services, and Web3 — connecting users to the future of digital finance. Our core values define how we build. We listen, care and improve to create products and experiences that put users first. Backed by a global team of ambitious builders, problem-solvers, and innovators, we foster a high-performance and fast-moving environment where talent is empowered to drive real impact at the global scale. Supported by 24/7 multilingual customer service and a strong commitment to innovation, we are shaping the future of finance through technology, collaboration, and bold execution. Today, Bybit is recognized as one of the most trusted and transparent platforms in the digital asset industry, continuing to expand its global presence while building the infrastructure for the next generation of financial services. Job responsibilities Red-blue confrontation drill Responsible for developing and executing penetration testing, red-blue confrontation, and practical attack and defense drills that simulate real attack scenarios, identifying potential security risks in enterprise networks, applications, cloud environments, work networks, and core business systems. Lead or participate in red-blue confrontation exercises to evaluate the defense team's ability in attack detection, alarm analysis, traceability analysis, emergency response, and recovery. Based on the real attack chain design exercise scenario, covering extranet breakthrough, web vulnerability exploitation, phishing entrance, privilege escalation, lateral movement, Data Discovery, privilege maintenance, and defense bypass stages. Combining the attack review results, promote the continuous optimization of security detection rules, response processes, asset governance, and security base lines. Attack Surface Analysis and Threat Research Identify enterprise network exposure, internet assets, cloud assets, APIs, supply chain components, and third-party access risks, evaluate attack paths, and provide mitigation recommendations. Monitor and collect threat intelligence, track vulnerability exploitation trends, APT attack methods, red team toolchain changes, and apply them to enterprise attack and defense exercises. Combining business scenarios to model attack paths and discover feasible attack chains from external exposure surfaces to core assets. Tracking AI-related security risks, including security issues in large-scale model applications, RAG systems, Agent systems, plug-in/tool calls, MCP services, AI code generation, and automated workflows. AI Security and Large Model Attack and Defense Responsible for the security evaluation of AI applications, intelligent agent systems, RAG Knowledge Base, AI Agent toolchain, and model services within the enterprise. Research and verify large-scale model-related attack techniques, including Prompt Injection, Jailbreak, Indirect Prompt Injection, data leakage, unauthorized tool invocation, security risks caused by model illusions, RAG poisoning, vector library pollution, sensitive information leakage, etc. Design AI red team test cases and evaluation framework, and conduct security verification on model input and output, context isolation, permission control, tool call chain, and data access boundary. Participate in the construction of AI security protection plan, including prompt word security policy, content security detection, tool call permission constraints, sensitive data desensitization, audit tracking, Agent sandbox isolation and security evaluation benchmark construction. Explore the application of AI in red team automation, vulnerability analysis, attack path planning, PoC verification, and report generation, and promote the platformization, automation, and intelligence of attack and defense capabilities. Tool and platform development Develop and optimize Red Team-specific tools and scripts for vulnerability mining, information collection, privilege escalation, lateral movement, credential analysis, traffic disguise, defense bypass, and automated report generation. Research and validate new attack techniques, and simulate real threats in combination with enterprise business scenarios. Build or participate in the construction of automated security evaluation platform, integrated vulnerability scanning, audio fingerprint recognition, asset mapping, PoC verification, attack path analysis, AI Agent arrangement and other capabilities. Combining LLM/Agent technology to explore automated penetration testing, intelligent vulnerability verification, code security auditing, and red team task scheduling. Security evaluation and reporting Conduct security evaluations on critical business systems, internal networks, cloud environments, work end points, API services, and AI applications, and output detailed technical reports, attack paths, impact analysis, and repair recommendations. Output AI security evaluation reports for AI applications, including attack examples, risk levels, exploitable paths, data leakage risks, permission boundary issues, and governance recommendations. Assist in improving enterprise security protection mechanisms, promote optimization of WAF, EDR, SIEM, NDR, HIDS, zero trust, identity permissions, and log auditing capabilities. Transform attack and defense discovery into security detection rules, base line specifications, develop security requirements, and continuous governance mechanisms. XFN collaboration Collaborate with the blue team, security operation, infrastructure, R & D, algorithm, data, and business teams to complete attack review, vulnerability repair, detection rule optimization, and security capability building. Provide security support to other departments of the enterprise, including emergency response drills, development security consulting, AI application pre-launch security review, and security training. Participate in the security design review of AI applications and security products, and promote the advance of security capabilities in R & D, testing, and Pushonline. Job requirements Basic skills Proficient in basic knowledge of cyber security, including TCP/IP protocol, network architecture, identity authentication, access control, principles and configurations of common security devices. Proficient in common attack techniques and red team toolchains, such as Sliver, Cobalt Strike, NPS, Burp Suite, Metasploit, Nmap, Masscan, Frida, Impacket, etc. Familiar with mainstream operating systems Windows, Linux, macOS security mechanism, log system, permission model and common use. Familiar with common web frameworks, API architectures, microservice structures, containers, and security risks in Kubernetes environments. Offensive and defensive technical capabilities Proficient in penetration testing and red team processes, including information collection, vulnerability scanning, vulnerability exploitation, intranet penetration, privilege escalation, lateral movement, privilege maintenance, Data Discovery, and trace cleaning. Familiar with the working principles and adversarial methods of enterprise-level security products, including WAF, EDR, SIEM, NDR, HIDS, zero-trust gateway, bastion host, and identity authentication system. Possess independent vulnerability analysis and PoC writing capabilities, able to reproduce, verify, and assess the impact of public vulnerabilities and 0day/1day risks. Proficient in one or more programming/scripting languages, such as Python, Go, Bash, PowerShell, JavaScript, etc., with experience in tool development and automation platform construction. AI security capabilities Familiar with the basic architecture of large-scale model applications, familiar with technical forms such as Prompt, RAG, Embedding, vector databases, Agent, Function Calling, MCP, plugin systems, etc. Understand or practice AI security testing methods, including Prompt Injection, Jailbreak, RAG data poisoning, sensitive information leakage, unauthorized tool invocation, model output security, Agent permission escape, etc. Able to design security test cases for AI applications, evaluate model input/output, context isolation, data boundaries, permission control, and tool invocation chain risks. Experience in using AI to assist security work, including vulnerability analysis, code auditing, intelligence analysis, attack path planning, report generation, or automated testing. Familiar with AI application security governance ideas, including model call auditing, prompt word security, sensitive data protection, content security detection, permission minimization, and sandbox isolation. Experience requirements More than 5 years of experience in red team, penetration testing, security research, or offensive and defensive exercises. Candidates with experience in large-scale enterprise attack and defense drills, red-blue confrontation, HW/major support, cloud attack and defense, or intranet penetration are preferred. Candidates with experience in AI security, large-scale model security, intelligent agent security, automated penetration testing platform or security tool platform construction are preferred. Familiar with enterprise security construction system, able to promote defense capability, detection capability, and governance process optimization from an attack perspective. Other capabilities Priority will be given to those who hold security-related certifications such as ♀ P, OSCE, CISSP, CISP, CEH, CISSP, CCSP, etc. Possess strong document writing and expression abilities, able to output high-quality technical reports, review documents, attack chain analysis, and security construction plans. Possess good problem analysis ability, learning ability, teamwork ability, and stress resistance. Be sensitive to new technologies, new Attack Surfaces, and new tools, and be able to proactively research and share internally. Bonus points Familiar with Cloud Computing Platform security and cloud attack and defense technologies, such as AWS, Azure, GCP, Tencent Cloud, Alibaba Cloud, etc. Familiar with Kubernetes, containers, Service Mesh, CI/CD, DevSecOps and supply chain security. Possess experience in zero trust, secure operation, threat hunting, Attack Surface management, and vulnerability management platform construction. Familiar with MCP Server, AI Agent framework, RAG system, vector database, LLM API gateway, model security evaluation framework. Experience in Automated Red Team, AI Penetration Testing, Intelligent Vulnerability Verification, Agent Orchestration, Security Knowledge Base or Security RAG System Construction. Experience in vulnerability submission, CVE, technical articles, open source projects, topic sharing, or tool release in the security community. Familiar with security frameworks such as MITRE ATT & CK, OWASP Top 10, OWASP LLM Top 10, NIST AI RMF, etc. Why Join Us At Bybit, we are committed to fostering a supportive and enriching work environment. Our benefits include: - Study Growth Fund: We support your professional development and continuous learning. - Internal Events: Participate in regular team-building activities, workshops, and events designed to promote collaboration and innovation. - Global Collaboration: Be part of a diverse, international team, working alongside colleagues from around the world. - Career Advancement: Access opportunities for growth and advancement within a rapidly expanding global company. - Internal Mobility: Grow with us- Your long-term development is important to us. We offer internal job opportunities to help build your career path.", "summaryDescription" : "Principal Security Operation Engineer at Bybit", "postedDate" : "2026-06-14T19:07:21.309", "createdAt" : "2026-06-14T19:07:21.309", "lastUpdated" : "2026-06-15T21:45:31.392", "ingestTimestamp" : "2026-06-14T19:07:21.309", "mongoId" : "6a2c6af174d8ee00a090f54c", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Executive", "dataQualityScore" : 0.7777778, "_score" : 978.33044, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "FinTech", "llmIndustryConfidence" : 0.98 }, { "id" : "6a2c6b1074d8ee00a0910012", "title" : "Principal Software Engineer", "company" : "Skillz Inc.", "salary" : { "min" : 3500000.0, "max" : 5500000.0, "currency" : "INR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Principal Software Engineer in Bengaluru, India, adjusted for seniority, industry, and company size." }, "location" : "Bengaluru, Karnataka, India", "locations" : [ "Bengaluru", "Karnataka", "India" ], "timestamp" : "2026-06-16T02:53:43.482", "fingerprint" : "6b82de53cb0b63e9034fcda067b639c16a20f653fc70acf2367ae95fe3dd5ae7", "source" : "greenhouse", "language" : "en", "applyUrl" : "http://corp.skillz.com/careers-list/?gh_jid=7186518", "externalId" : "7186518", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Bengaluru", "state" : "Karnataka", "country" : "India", "continent" : "as", "source" : "llm", "workMode" : "hybrid", "geo" : "12.9767936,77.5900820" } ], "locationText" : "Bengaluru, Karnataka, India", "minimumEducation" : "Bachelor's", "experienceMinYears" : 10, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "remoteFriendly" : true, "rawDescription" : "About the job If you want to build, develop, and see your impact, join Skillz and level up your Career! Skillz, the first publicly-traded mobile eSports platform that hosts billions of casual mobile gaming tournaments for millions of players worldwide, is revolutionizing the gaming industry. By fostering social competition within games, the Skillz platform helps developers build multi-million dollar franchises by enabling real-money activity in their games and providing operational support while connecting players through fair, enjoyable, and meaningful competition. At Skillz, we understand the thrill of achievement and the satisfaction of overcoming challenges. Want to join a team made up of alums from Apple, Amazon, Google, Microsoft, Tesla, Twitter (X), Roblox, Zynga, Samsung, Lyft, EA, Riot, Nexon, Gameskraft, PlayStation, Unity, Scopely, Tinder, Intel, Deloitte, EY, Twitch, DraftKings, Wynn Resorts and more? Learn more to see if Skillz is the right fit for your next career move! Experience: Experience: 10+ years of professional work experience in Golang (GO) and/or Java Proficient in working with cloud providers such as AWS, Azure, or GCP. Hands-on experience with Kubernetes or similar container technologies. Able to work in-office 3 days a week in Bangalore, India Experience in the Gaming Industry (ideally). Alternatively, passion for building services for games. Strong experience with distributed, multi-tiered systems, caching mechanisms, and relational databases. Bachelor's degree in Computer Science or a technical field of study, or equivalent industry experience Location: Table Space Towers, 4th Cross Rd, Kaveri Nagar, Krishnarajapuram, Bengaluru, Karnataka 560048 Why Skillz ? Culture of Impact: Join a united team of builders, creators, innovators, and entrepreneurs driven by the desire to win. At Skillz, we create value, obsess over our product, and make a difference in the world. Recognized Success: Skillz has earned recognition as one of Fast Company's Most Innovative Companies, CNBC's Disruptor 50, San Francisco Business Times' Best Places to Work, Forbes' Next Billion-Dollar Startups, and the #1 fastest-growing company in America on the Inc. 5000 list, and many more. Development Opportunities: We hold our employees to high standards while providing them with professional growth opportunities. We operate like a startup, and encourage all of our employees to collaborate and voice feedback about our product and ways we can improve as a business. We believe in never settling, and that also pertains to your growth. Join Skillz and Let's Redefine the Boundaries of Gaming! Together, we'll create a world where skill, passion, and innovation thrive. We look forward to having you on board! Skillz embraces diversity and is proud to be an equal opportunity employer. As part of our commitment to diversifying our workforce, we do not discriminate on the basis of age, race, sex, gender, gender identity, color, religion, national origin, sexual orientation, marital status, citizenship, veteran status, or disability status, and we operate in compliance with the San Francisco Fair Chance Ordinance. Skillz embraces diversity and is proud to be an equal opportunity employer. As part of our commitment to diversifying our workforce, we do not discriminate on the basis of age, race, sex, gender, gender identity, color, religion, national origin, sexual orientation, marital status, citizenship, veteran status, or disability status, and we operate in compliance with the San Francisco Fair Chance Ordinance.", "summaryDescription" : "Principal Software Engineer at Skillz Inc.", "postedDate" : "2026-06-14T18:33:17.415", "createdAt" : "2026-06-14T18:33:17.415", "lastUpdated" : "2026-06-16T02:53:43.482", "ingestTimestamp" : "2026-06-14T18:33:17.415", "mongoId" : "6a2c6b1074d8ee00a0910012", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Lead", "dataQualityScore" : 0.7777778, "_score" : 978.19904, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.98 }, { "id" : "6a2c6ac774d8ee00a090de1e", "title" : "Principal Software Engineer (AI)", "company" : "Future Secure AI", "industry" : "Technology", "salary" : { "min" : 6000000.0, "max" : 9000000.0, "currency" : "INR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "The estimation is based on the market baseline for a Principal Software Engineer (AI) in the Technology industry, adjusted for executive seniority and senior experience level in the APAC region." }, "location" : "APAC", "locations" : [ "APAC" ], "timestamp" : "2026-06-16T01:37:52.189", "fingerprint" : "a1106228ac9b9c89c00d423a68b6abd10b0d321abcb1296fe572cbc87dad7d6c", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.anz.greenhouse.io/futuresecureai/jobs/4003843201", "externalId" : "4003843201", "industryFunction" : { }, "structuredLocations" : [ { "continent" : "as", "workMode" : "onsite" } ], "locationText" : "", "employmentType" : "FULL_TIME", "experienceMinYears" : 10, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "Node.js, TypeScript, AI frameworks, LLMs", "professionalSkills" : [ "Technical leadership", "Architectural decisions", "System design" ], "hardSkillsList" : [ "AI development", "System architecture", "Data governance", "Security design" ], "softSkillsList" : [ "Courage", "Rigor" ], "hardSkills" : [ { "name" : "AI development", "level" : "intermediate" }, { "name" : "System architecture", "level" : "intermediate" }, { "name" : "Data governance", "level" : "intermediate" }, { "name" : "Security design", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Courage" }, { "name" : "Rigor" } ], "majorSkills" : "AI, Software architecture, Enterprise AI", "majorSkillsList" : [ "AI", "Software architecture", "Enterprise AI" ], "coreResponsibilities" : "Shape architectural decisions, Provide technical leadership, Design human-in-the-loop systems, Set technical standards, Set technical patterns, Bring novel approaches, Integrate LLMs, Integrate AI frameworks, Work with customers, Understand customer needs, Ensure solutions exceed expectations", "teamCollaboration" : "Across squads; Across projects; Across product; With engineering teams; With customer delivery teams", "domainKnowledge" : "Enterprise AI; AI Co-Worker systems; Persona-based AI; Operational workflows; Mission-critical environments; Model-agnostic platform; Deterministic systems; Non-deterministic systems; Production AI products", "domainList" : [ "enterprise-ai", "ai-co-worker-systems", "persona-based-ai", "operational-workflows", "mission-critical-environments", "model-agnostic-platform", "deterministic-systems", "non-deterministic-systems", "production-ai-products" ], "domainSpecificKnowledge" : [ "Enterprise AI", "AI Co-Worker systems", "Persona-based AI", "Operational workflows", "Mission-critical environments", "Model-agnostic platform", "Deterministic systems", "Non-deterministic systems", "Production AI products" ], "toolProficiency" : [ "LangChain", "LangGraph" ], "communicationSkills" : "Align stakeholders", "innovationCreativity" : "Novel approaches", "problemSolvingSkills" : "Problem-solving instincts", "outcomesObjectives" : "Raise organizational performance; Transform the world", "qualificationsBasic" : "10+ years software development experience, Deep hands-on AI work, Coding fundamentals, Node.js experience, TypeScript experience, Experience building secure systems, Experience with data governance, Track record shaping architectural decisions, Track record defending architectural decisions", "qualificationsPreferred" : "Experience with LangChain, Experience with LangGraph", "rawDescription" : "About the Company At Future Secure AI, we're building something genuinely new — and we're looking for people bold enough to build it with us. We work at the frontier of AI, tackling big, real-world problems for global enterprises across multiple industries, armed with state-of-the-art technology and a culture that prizes courage, rigor, and relentless curiosity. Our BRAVER values aren't just words on a wall — they describe the kind of people we are and the standard we hold ourselves to every day. Our leadership team is entrepreneurial, experienced, and accessible, with an open-door policy that means you'll never be just a number here. We invest seriously in your growth because we know our success depends on yours. If you're ready to work alongside some of the brightest minds in the industry, push into uncharted territory, and do work that genuinely matters, Future Secure AI is the place for you. Future Secure AI (FSAI) is a leading enterprise AI company that was created in deep partnership with one of the world's largest financial institutions. Operating as an enterprise company with deep relationships at C-suite with large global enterprises, FSAI believes humans and AI Workers will collaborate seamlessly to raise organisational performance. FSAI has dozens of partnerships with leading companies in most industries and regions globally. FSAI has a strategic focus on expanding globally as we continue our extraordinary journey to transform the world with the most cutting-edge artificial intelligence We're hiring a Principal Software Engineer (AI) to help set the technical direction of our products and platform. You'll provide technical leadership across squads, projects, and product, shaping architectural decisions and working closely with engineering and customer delivery teams. If you do your best work when the problem is ambiguous and the stakes are high, you'll fit here. What you'll be doing Shaping architectural decisions for our AI Co-Worker systems, enabling enterprise customers to deploy persona-based AI Co-Workers that perform complex, end-to-end operational workflows through their own secure platform. Designing human-in-the-loop systems that keep humans in control of AI Co-Workers operating in mission-critical environments. Setting the technical standards and patterns other engineers will build on. Bringing novel approaches to how deterministic and non-deterministic systems are combined in production AI products. Ensuring our platform remains model-agnostic, integrating LLMs and AI frameworks from both established and emerging vendors. Working closely with customers to deeply understand their needs and make sure solutions exceed their expectations. Your application should demonstrate 10+ years of software development experience, with deep hands-on AI work. Strong Coding fundamentals, we primarily use Node.js and typescript Experience with AI frameworks and orchestration tools such as LangChain or LangGraph. Experience building systems where security and data governance are first-class design constraints, not afterthoughts. A track record of shaping and defending architectural decisions in complex, production environments. The communication skills to align technical and non-technical stakeholders around hard trade-offs. Sharp problem-solving instincts and the follow-through to match. Why join us You'll have genuine influence over the technical direction of a fast-growing AI product company, technical leadership across the full breadth of our product, and a direct line into senior leadership. Future Secure AI Privacy Policy At Future Secure AI, we are committed to protecting your privacy and adhering to the principles of the General Data Protection Regulation (GDPR) and the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth). Our Privacy Policy outlines how we collect, use, share, and protect your personal data when you visit our website at www.futuresecure.ai (the \"Website\") and use our services.", "summaryDescription" : "Principal Software Engineer (AI) at Future Secure AI. Skills: AI, Software architecture, Enterprise AI. Shape architectural decisions. Provide technical leadership", "postedDate" : "2026-06-14T20:06:12.492", "createdAt" : "2026-06-14T20:06:12.492", "lastUpdated" : "2026-06-16T01:37:52.189", "ingestTimestamp" : "2026-06-14T20:06:12.492", "mongoId" : "6a2c6ac774d8ee00a090de1e", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "AI development", "System architecture", "Data governance", "Security design", "Courage", "Rigor", "AI", "Software architecture", "Enterprise AI", "Technical leadership", "Architectural decisions", "System design", "AI Co-Worker systems", "Persona-based AI", "Operational workflows", "Mission-critical environments", "Model-agnostic platform", "Deterministic systems", "Non-deterministic systems", "Production AI products", "LangChain", "LangGraph" ], "skillCount" : 22, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Executive", "dataQualityScore" : 1.0, "_score" : 976.55237, "daysOld" : 1, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a30575af292fd229cf385dd", "title" : "Principal Cloud Network Security Engineer", "company" : "GoDaddy", "industry" : "Technology", "salary" : { "min" : 5500000.0, "max" : 8500000.0, "currency" : "INR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "The estimation is based on market data for Principal Cloud Network Security Engineers in India, adjusted for executive seniority, a large technology company, and remote work." }, "location" : "India", "locations" : [ "India" ], "timestamp" : "2026-06-16T07:30:19.125", "fingerprint" : "26fe4868b9d531b5013807c2254b00075f5bf5b94f01459d4d1c323c3e2d2193", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://careers.godaddy/jobs?gh_jid=7561555003", "externalId" : "7561555003", "industryFunction" : { }, "structuredLocations" : [ { "country" : "India", "continent" : "as", "workMode" : "remote" } ], "locationText" : "India", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "remoteFriendly" : true, "workSiteFlexibility" : "Remote", "rawDescription" : "Location Details: India, Remote At GoDaddy the future of work looks different for each team. Some teams work in the office full-time; others have a hybrid arrangement (they work remotely some days and in the office some days) and some work entirely remotely. This is a remote position, so you’ll be working remotely from your home. You may occasionally visit a GoDaddy office to meet with your team for events or meetings. Join our Team Do you want to be an Information Security Lead at GoDaddy? GoDaddy’s Security organization is looking for a Cloud Security Engineer. We work out large-scale and cross-company security challenges while ensuring that partnership with the development and operational communities remains front of mind. At GoDaddy, Security Engineers apply their strong hands-on technical skills to craft scalable solutions for multiple problems. You must communicate with GoDaddy Engineering teams, perform security assessments, prioritize security risks, and design. We, as a team, implement high-quality security engineering solutions! What you'll get to do... The Principal Cloud Network Security Engineer is a senior technical leadership role responsible for defining, evolving, and driving GoDaddy's security architecture at scale. This role operates with broad organizational influence, crafting long-term security strategy, architectural direction, and engineering standards across multiple services and platforms. As a recognized subject-matter expert, you'll address the most complex and ambiguous security challenges in hyperscale cloud environments. The role requires deep technical depth, strong architectural judgment, and the ability to influence senior engineering leaders and executives. Success is measured not only by individual technical contributions but by the security outcomes delivered across organizations through vision, mentorship, and cross-team alignment. Lead the development of long-term AWS and hybrid cloud security architecture and strategy, ensuring alignment with organizational goals, risk posture, and expert-level enterprise networking standards (CCIE/JNCIE Security) Architect hyperscale security solutions that balance security, availability, performance, and customer experience, supported by reference architectures, network automation frameworks, guardrails, and design patterns Conduct security architecture reviews and threat modeling for high-risk services, identify systemic security risks, and drive cross-organizational remediation initiatives Influence service roadmaps to integrate security early in the design lifecycle, champion advanced network automation frameworks, infrastructure-as-code, policy-as-code, and continuous assurance mechanisms, and lead complex incident response efforts Mentor engineers at all levels to raise the security bar, partner with senior leadership on priorities, and represent AWS security architecture in executive reviews and technical forums Your experience should include... 12+ years in security engineering, cloud infrastructure, or distributed systems with proven leadership of large-scale security initiatives and experience designing/securing hyperscale cloud platforms Deep AWS security expertise across IAM, VPC, KMS, EC2, EKS, serverless architectures, logging, monitoring, and core security domains (identity management, network segmentation, cryptography, secrets management, detection engineering) Strong technical engineering skills including threat modeling, security architecture design, infrastructure-as-code/policy-as-code (AWS CDK, CloudFormation, Terraform), and proficiency in Python, Go, or Java Expert-level network security knowledge equivalent to active CCIE Security or JNCIE-SEC credentials to effectively bridge cloud-native controls with enterprise network infrastructure Proven ability to influence and lead across organizational boundaries without direct authority in complex, distributed environments This role requires overlap with US business hours for collaboration with US-based teams You might also have... Bachelor’s degree in Computer Science, Engineering, or a related field Familiarity with global security and compliance frameworks (e.g., NIST, ISO 27001, SOC, PCI) and their application at scale We've got your back...  We offer a range of total rewards that may include paid time off, retirement savings (e.g., 401k, pension schemes), bonus/incentive eligibility, equity grants, participation in our employee stock purchase plan, competitive health benefits, and other family-friendly benefits including parental leave. GoDaddy’s benefits vary based on individual role and location and can be reviewed in more detail during the interview process. We also embrace our diverse culture and offer a range of Employee Resource Groups (Culture). Have a side hustle? No problem. We love entrepreneurs! Most importantly, come as you are and make your own way. We encourage you to apply even if your experience or skillset doesn’t align perfectly with every requirement. We value a wide range of backgrounds and transferable skills, and we are excited to support learning and growth. About us... GoDaddy is empowering everyday entrepreneurs around the world by providing the help and tools to succeed online, making opportunity more inclusive for all. GoDaddy is the place people come to name their idea, build a professional website, attract customers, sell their products and services, and manage their work. Our mission is to give our customers the tools, insights, and people to transform their ideas and personal initiative into success. To learn more about the company, visit About Us. At GoDaddy, we know diverse teams build better products—period. Our people and culture reflect and celebrate that sense of diversity and inclusion in ideas, experiences and perspectives. But we also know that’s not enough to build true equity and belonging in our communities. That’s why we prioritize integrating diversity, equity, inclusion and belonging principles into the core of how we work every day—focusing not only on our employee experience, but also our customer experience and operations. It’s the best way to serve our mission of empowering entrepreneurs everywhere, and making opportunity more inclusive for all. To read more about these commitments, as well as our representation and pay equity data, check out our Diversity and Pay Parity annual report which can be found on our Diversity Careers page. GoDaddy is proud to be an equal opportunity employer. GoDaddy will consider for employment qualified applicants with criminal histories in a manner consistent with local and federal requirements. Refer to our full EEO policy. Our recruiting team is available to assist you in completing your application. If they could be helpful, please reach out to myrecruiter@godaddy.com. GoDaddy doesn’t accept unsolicited resumes from recruiters or employment agencies.", "summaryDescription" : "Principal Cloud Network Security Engineer at GoDaddy", "postedDate" : "2026-06-15T23:21:13.464", "createdAt" : "2026-06-15T23:21:13.464", "lastUpdated" : "2026-06-16T07:30:19.125", "ingestTimestamp" : "2026-06-15T23:21:13.464", "mongoId" : "6a30575af292fd229cf385dd", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Executive", "dataQualityScore" : 0.8888889, "_score" : 964.337, "daysOld" : 0, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.98 }, { "id" : "69fda4e44c40e2acd1b998b5", "title" : "Application Architect", "company" : "Amazon Web Services", "industry" : "Solutions Architect, Professional Services, Cloud Computing", "salary" : { "min" : 1.15E8, "max" : 1.75E8, "currency" : "KRW", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Senior Application Architect in Seoul, South Korea, adjusted for the technology industry and large company size." }, "location" : "Seoul, KOR", "locations" : [ "Seoul, KOR" ], "timestamp" : "2026-06-15T04:14:28.028", "fingerprint" : "ff245cf21b57bccec2956eb2f63f7c326e2a47f119b47e0be4fe2f5e88aca96c", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.jobs/jobs/10413246/apply", "externalId" : "cd78e06e-406c-46c9-b25d-0461b74efd5e", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Seoul", "country" : "South Korea", "continent" : "as", "source" : "llm", "workMode" : "onsite", "geo" : "37.5666791,126.9782914" } ], "locationText" : "Seoul, South Korea", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "AWS, EC2, ELB, RDS, Route53, S3", "professionalSkills" : [ "Cloud architecture", "Design patterns", "Software development", "Infrastructure development" ], "hardSkillsList" : [ "Cloud optimization", "Agile software development" ], "hardSkills" : [ { "name" : "Cloud optimization", "level" : "intermediate" }, { "name" : "Agile software development", "level" : "intermediate" } ], "majorSkills" : "Application architecture, Cloud computing, AWS services", "majorSkillsList" : [ "Application architecture", "Cloud computing", "AWS services" ], "coreResponsibilities" : "Architect scalable applications, Architect highly available applications, Design customer applications, Develop customer applications, Optimize applications for cloud, Work as technical leader, Provide software development knowledge, Advise AWS best practices, Implement AWS best practices, Act as infrastructure specialist, Act as application development specialist, Develop Agile software, Implement DevOps practices, Implement infrastructure as code, Implement continuous integration, Implement automated deployment", "teamCollaboration" : "Customer business teams; Customer development teams; Customer infrastructure teams; AWS organization collaboration", "projectManagementSkills" : [ "Agile", "DevOps" ], "domainKnowledge" : "Cloud architecture; Design patterns; Distributed computing", "domainList" : [ "cloud-architecture", "design-patterns", "distributed-computing" ], "domainSpecificKnowledge" : [ "Cloud architecture", "Design patterns", "Distributed computing" ], "innovationCreativity" : "Drive feature innovation", "specialRequirements" : "Travel to client locations", "qualificationsBasic" : "Knowledge of primary AWS services, Experience implementing AWS services", "qualificationsPreferred" : "5+ years of IT implementation experience, Experience in cloud computing technologies, Experience leading design, development, deployment, Experience facilitating discussions with senior leadership", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "At Amazon Web Services (AWS), we’re hiring highly technical cloud appliction architects to help our customers develop technical expertise and capacity, while also collaborating with our customers and partners on key engagements. Our consultants will deliver Pilot projects, topical workshops, and lead implementation projects. Professional Services engage in a wide variety of projects for customers, providing collective experience from across the AWS customer base and are obsessed about strong success for the Customer. Our team collaborates across the entire AWS organization to bring access to product and service teams, to get the right solution delivered and drive feature innovation based upon customer needs. 모집분야 Amazon Web Services (AWS)에서는 고객이 전문지식 역량을 개발할 수 있도록 돕고, 이를 위해 파트너와 협력할 수 있는 뛰어난 기술역량을 갖춘 클라우드 어플리케이션 아키텍트를 채용하고 있습니다. AWS의 컨설턴트들은 아키텍쳐 검토와 파일럿 개발, 주제별 워크샵, 그리고 프로젝트를 통한 딜리버리를 담당하게 됩니다. 프로페셔널 서비스팀은 다양한 프로젝트를 통해 축적한 경험을 바탕으로 고객의 성공을 돕습니다. 또한, AWS 내부 다른 조직과 협력하여 제품과 서비스, 그리고 적절한 해결책을 고객에게 제공하고 고객 요구 사항에 따라 혁신을 추진합니다. Key job responsibilities We are looking for hands on developers who are passionate about: • Helping customers architect scalable, highly available application solutions that leverage AWS services • Architecting and developing customer applications to be cloud optimized • Working as a technical leader along side customer business, development and infrastructure teams. • Providing deep software development knowledge with respect cloud architecture, design patterns and programming • Advising and implementing AWS best practices • Working as both an infrastructure and application development specialist • Agile software development and DevOps • Implementing DevOps practices such as infrastructure as code, continuous integration and automated deployment 아래 사항들에 관심있는 개발자분들의 많은 지원 바랍니다. • AWS 서비스상에서 확장 가능하고 가용성 높은 어플리케이션 솔루션 설계 지원 • 클라우드에 최적화 될 수 있는 고객 어플리케이션 설계 및 개발 • 고객 비즈니스, 개발, 운영 팀과 협업할 테크니컬 리더 • 클라우드 아키텍처, 디자인 패턴 및 프로그래밍과 관련한 심층적인 소프트웨어 개발 지식 제공 • AWS 우수 사례 소개 및 실현 • 인프라 및 어플리케이션 개발 전문가로 활동 • Agile 방식의 소프트웨어 개발과 DevOps • 코드 인프라, 지속적인 통합 및 자동화 배포와 같은 DevOps 사례 구현 A day in the life This is a customer facing role. You will be required to travel to client locations and deliver professional services as needed. 고객을 대면하는 역할이며, 필요에 따라 전문적인 서비스 제공을 위해 고객을 방문해야 할 수 있습니다. About the team AWS Global Services includes experts from across AWS who help our customers design, build, operate, and secure their cloud environments. Customers innovate with AWS Professional Services, upskill with AWS Training and Certification, optimize with AWS Support and Managed Services, and meet objectives with AWS Security Assurance Services. Our expertise and emerging technologies include AWS Partners, AWS Sovereign Cloud, AWS International Product, and the Generative AI Innovation Center. You’ll join a diverse team of technical experts in dozens of countries who help customers achieve more with the AWS cloud. About AWS Diverse Experiences AWS values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying. 다양성 AWS는 다양한 경험을 중요하게 생각합니다. JD에 나와 있는 자격 및 기술을 모두 충족하지 못하더라도 지원자가 지원하도록 권장합니다. 경력을 이제 막 시작하였거나, 전통적인 경력을 쌓지 않았거나, 조금 다른 경험을 쌓았다고, 지원을 중단하실 필요는 없습니다. Why AWS? Amazon Web Services (AWS) is the world’s most comprehensive and broadly adopted cloud platform. We pioneered cloud computing and never stopped innovating — that’s why customers from the most successful startups to Global 500 companies trust our robust suite of products and services to power their businesses. AWS를 선택해야 하는 이유 아마존 웹 서비스 (AWS) 는 세계에서 가장 포괄적이고 널리 채택된 클라우드 플랫폼입니다.우리는 클라우드 컴퓨팅 시장을 개척했으며 혁신을 멈추지 않았습니다. 이것이 바로 가장 성공적인 스타트업부터 Global 500 기업에 이르는 고객이 AWS의 제품 및 서비스 제품군을 신뢰하는 이유입니다. Inclusive Team Culture AWS values curiosity and connection. Our employee-led and company-sponsored affinity groups promote inclusion and empower our people to take pride in what makes us unique. Our inclusion events foster stronger, more collaborative teams. Our continual innovation is fueled by the bold ideas, fresh perspectives, and passionate voices our teams bring to everything we do. 포용적인 팀 문화 AWS에서는 배우고 호기심을 갖는 것이 우리의 본능입니다.직원이 주도하는 어피니티 그룹은 서로 다른 점을 자랑스럽게 여길 수 있는 포용의 문화를 조성합니다. Mentorship & Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, mentorship and other career-advancing resources here to help you develop into a better-rounded professional. 멘토십 및 경력 개발 우리는 세계 최고의 고용주가 되기 위해 노력하면서 지속적으로 성과 기준을 높이고 있습니다.그렇기 때문에 더 다재다능한 전문가로 발전하는 데 도움이 되는 지식 공유, 멘토십 및 기타 경력 개발 리소스를 찾을 수 있습니다. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why we strive for flexibility as part of our working culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve in the cloud. 일과 삶의 균형 우리는 일과 삶의 조화를 중요하게 생각합니다.직장에서의 성공을 위해 가정에서의 희생을 감수해서는 안 됩니다. 그렇기 때문에 유연한 근무 시간과 근무 방식이 우리 문화의 일부입니다.직장과 가정에서 지지받는다고 느낄 때 클라우드로는 달성할 수 없는 것이 없습니다. #AWSKOREA #aws-korea-proserv-ap Basic Qualifications: - Knowledge of the primary aws services (ec2, elb, rds, route53 & s3) - Experience implementing AWS services in a variety of distributed computing environments Preferred Qualifications: - 5+ years of IT implementation experience - Experience and technical expertise (design and implementation) in cloud computing technologies - Experience leading the design, development and deployment of business software at scale or recent hands-on technology infrastructure, network, compute, storage, and virtualization experience - Experience leading the design, development and deployment of business software at scale or recent hands-on technology infrastructure, network, compute, storage, and virtualization experience - Experience facilitating discussions with senior leadership regarding technical / architectural trade-offs, best practices, and risk mitigation Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.", "summaryDescription" : "Application Architect at Amazon Web Services. Skills: Application architecture, Cloud computing, AWS services. Architect scalable applications. Architect highly available applications", "postedDate" : "2026-06-13T05:36:06.495", "createdAt" : "2026-06-13T05:36:06.495", "lastUpdated" : "2026-06-15T04:14:28.028", "ingestTimestamp" : "2026-06-13T05:36:06.495", "mongoId" : "69fda4e44c40e2acd1b998b5", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.jobs/jobs/10413246/apply", "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "Cloud optimization", "Agile software development", "Application architecture", "Cloud computing", "AWS services", "Cloud architecture", "Design patterns", "Software development", "Infrastructure development", "Agile", "DevOps", "Distributed computing" ], "skillCount" : 12, "jobCategory" : "engineering", "dataQualityScore" : 1.0, "_score" : 963.04236, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology" }, { "id" : "6a307673f292fd229c019f12", "title" : "Principal Software Engineer, Physics", "company" : "Roblox", "industry" : "Technology", "salary" : { "min" : 295250.0, "max" : 345040.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "San Mateo, CA, United States", "locations" : [ "San Mateo", "CA", "United States" ], "timestamp" : "2026-06-16T11:04:46.696", "fingerprint" : "2f8caa513fea4852a06c6262bebc5ce0ca67180b690fc2aee614b1ddb42d4e6d", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://careers.roblox.com/jobs/7998366?gh_jid=7998366", "externalId" : "7998366", "industryFunction" : { }, "structuredLocations" : [ { "city" : "San Mateo", "state" : "California", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "hybrid", "geo" : "37.4969040,-122.3330573" } ], "locationText" : "San Mateo, California, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 8, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "remoteFriendly" : false, "rawDescription" : "Every day, tens of millions of people come to Roblox to explore, create, play, learn, and connect with friends in 3D immersive digital experiences– all created by our global community of developers and creators. At Roblox, we’re building the tools and platform that empower our community to bring any experience that they can imagine to life. Our vision is to reimagine the way people come together, from anywhere in the world, and on any device. We’re on a mission to connect a billion people with optimism and civility, and looking for amazing talent to help us get there. A career at Roblox means you’ll be working to shape the future of human interaction, solving unique technical challenges at scale, and helping to create safer, more civil shared experiences for everyone. From the early days, simulated physics has been the foundation of the way users build in Roblox. Our physics engine enables dynamic environments with emergent behavior making games more immersive and exciting. The Physics team develops Roblox's proprietary distributed physics engine. Our team implements the mathematical models behind our dynamic simulation engine, and ships engine APIs and tools that developers use every day. These models incorporate rigid body dynamics arising from external forces, collisions, and constraints while optimizing for real-time performance. We work on integrating the low level physics solver into the rest of the engine for online gameplay across multiple platforms. You will report to the Physics Environment Engineering Manager. You Will: Innovate and implement powerful physics features that empower Roblox developers to create immersive and dynamic experiences. Drive innovation through research and rapid prototyping, translating new ideas into practical solutions that stand the test of time. Optimize and enhance the robustness and performance of the physics engine and its integrations, ensuring a seamless user experience. Collaborate with internal teams and external developers, providing expert support and guidance to improve feature utilization and resolve technical challenges. You Have: Extensive C++ Development: 8+ years of professional experience writing high-performance, optimized C++ code (2+ years if with an advanced degree). Performance Engineering: Demonstrated ability to use multithreading and SIMD optimization techniques to enhance application efficiency with knowledge of modern computer architecture and its impact on software performance. Physics and Numerical Methods Experience: Practical experience applying numerical methods to solve problems in real-time physics simulation. Real-Time Physics Expertise: Proven experience developing and deploying real-time and online multiplayer physics simulations. Physics SDK Familiarity: Hands-on experience integrating and applying physics SDKs such as PhysX, Havok, and Bullet. Educational Background: Bachelor's or advanced degree in Computer Science, Mathematics, Physics, Engineering, or equivalent demonstrated experience. For roles that are based at our headquarters in San Mateo, CA: The starting base pay for this position is as shown below. The actual base pay is dependent upon a variety of job-related factors such as professional background, training, work experience, location, business needs and market demand. Therefore, in some circumstances, the actual salary could fall outside of this expected range. This pay range is subject to change and may be modified in the future. All full-time employees are also eligible for equity compensation and for benefits as described on this page. Annual Salary Range $295,250—$345,040 USD Roles that are based in an office are onsite Tuesday, Wednesday, and Thursday, with optional presence on Monday and Friday (unless otherwise noted). Roblox provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws. Roblox also provides reasonable accommodations to candidates with qualifying disabilities or religious beliefs during the recruiting process. For US based roles only, please note the Company may not be able to employ candidates for this role who have United States work authorization related to certain U. S. visa categories, or support future H-1B sponsorship at this time.", "summaryDescription" : "Principal Software Engineer, Physics at Roblox", "postedDate" : "2026-06-16T01:19:09.118", "createdAt" : "2026-06-16T01:19:09.118", "lastUpdated" : "2026-06-16T11:04:46.696", "ingestTimestamp" : "2026-06-16T01:19:09.118", "mongoId" : "6a307673f292fd229c019f12", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 295250, "salaryAnnualMax" : 345040, "salaryBand" : "200k+", "hasSalary" : true, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Lead", "dataQualityScore" : 0.8888889, "_score" : 961.5934, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.98 }, { "id" : "6a2ca5bb74d8ee00a09b7e78", "title" : "Principal Architect", "company" : "Ezra", "industry" : "FinTech", "salary" : { "min" : 1.0E7, "max" : 1.5E7, "currency" : "KES", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for Principal Architect in Nairobi, Kenya, adjusted for executive seniority in the FinTech industry." }, "location" : "Nairobi, Nairobi, Kenya", "locations" : [ "Nairobi", "Nairobi", "Kenya" ], "timestamp" : "2026-06-15T07:57:08.772", "fingerprint" : "b7baedc719fb61ea23897bef63eadc3fe419ef9c36c24d9544d11cc2677b055f", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://ezra.world/company/careers/7650898003?gh_jid=7650898003", "externalId" : "7650898003", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Nairobi", "country" : "Kenya", "continent" : "af", "source" : "llm", "workMode" : "onsite", "geo" : "-1.3023980,36.8288509" } ], "locationText" : "Nairobi, Kenya", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "Java, Clojure, AI, Cloud-native", "professionalSkills" : [ "System design", "Technical strategy", "Architectural oversight", "Roadmap planning", "Risk management" ], "hardSkillsList" : [ "Service-based design", "Event-driven systems", "Data modeling", "High availability", "Fault tolerance", "Secure coding" ], "softSkillsList" : [ "Mentorship", "Leadership" ], "hardSkills" : [ { "name" : "Service-based design", "level" : "intermediate" }, { "name" : "Event-driven systems", "level" : "intermediate" }, { "name" : "Data modeling", "level" : "intermediate" }, { "name" : "High availability", "level" : "intermediate" }, { "name" : "Fault tolerance", "level" : "intermediate" }, { "name" : "Secure coding", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Mentorship" }, { "name" : "Leadership" } ], "majorSkills" : "Enterprise architecture, Platform engineering, Data architecture, AI integration", "majorSkillsList" : [ "Enterprise architecture", "Platform engineering", "Data architecture", "AI integration" ], "coreResponsibilities" : "Co-define technical architecture, Champion technical standards, Institute governance models, Ensure architectural adherence, Promote platform engineering best practices, Promote data architecture best practices, Collaborate with product managers, Collaborate with engineering managers, Collaborate with business leaders, Translate product vision, Contribute to production code, Act as technical coach, Guide resolution of technical problems, Define technology standards, Define development methodologies, Define security best practices, Advocate for Test-Driven Development, Advocate for secure coding, Lead code reviews, Lead design reviews, Identify emerging technologies, Pilot emerging technologies, Promote emerging technologies, Drive architectural evolution, Shape strategic direction, Review technical designs, Design architectural patterns, Promote architectural patterns, Drive data modeling, Drive data architecture, Drive data store evolution, Identify systemic architectural risk, Resolve technical debt, Consult on roadmap execution, Provide architectural clarity, Provide hands-on advice, Unblock teams, Accelerate delivery", "teamCollaboration" : "Multiple engineering teams; Cross-functional teams; Engineering leaders; Product managers", "projectManagementSkills" : [ "Roadmap planning" ], "domainKnowledge" : "Lending platforms; Data platforms; FinTech; Digital lending; Mobile wallets; Cloud-native solutions; AI-enabled systems; Service-based design; Event-driven systems; Data architecture; Containerisation; CI/CD pipelines; High availability; Fault tolerance; Data integrity; System resilience", "domainList" : [ "lending-platforms", "data-platforms", "fintech", "digital-lending", "mobile-wallets", "cloud-native-solutions", "ai-enabled-systems", "service-based-design", "event-driven-systems", "data-architecture", "containerisation", "ci-cd-pipelines", "high-availability", "fault-tolerance", "data-integrity", "system-resilience" ], "domainSpecificKnowledge" : [ "Lending platforms", "Data platforms", "FinTech", "Digital lending", "Mobile wallets", "Cloud-native solutions", "AI-enabled systems", "Service-based design", "Event-driven systems", "Data architecture", "Containerisation", "CI/CD pipelines", "High availability", "Fault tolerance", "Data integrity", "System resilience" ], "innovationCreativity" : "Emerging technologies; AI practices", "problemSolvingSkills" : "Technical problem solving", "outcomesObjectives" : "Reduced technical debt; Improved system reliability; Accelerated delivery velocity; Sustained platform stability; High-performance platform", "qualificationsBasic" : "5+ years experience, Hands-on technical expertise, Deep technical knowledge, Experience in software architecture, Experience in platform architecture, Experience in data architecture, Experience in lending platforms, Experience in data platforms", "qualificationsPreferred" : "Experience with AI-enabled systems, Experience with cloud-native solutions", "workSiteFlexibility" : "Onsite", "rawDescription" : "Job Title: Principal Architect Location: Nairobi, Kenya Reports to: Director, Technology Delivery About the role: The Principal Architect is a highly experienced, hands-on, senior individual contributor who is accountable for the long-term architectural vision, strategy, and technical standards for our mission-critical lending, data, and customer value platform. This role balances deep, hands-on technical expertise in software, platform, and data architecture with the ability to influence and guide multiple engineering teams. The Principal Architect ensures that all technical domains are unified under a coherent, scalable, resilient, and secure enterprise architecture that directly supports the company’s mission and aggressive growth strategy. Main Objectives & Responsibilities: Architectural Vision & Governance: Co-define and champion the long-term technical architecture and standards for the entire platform, ensuring alignment across software engineering, platform engineering, and data architecture domains. Technical Strategy & Architectural Oversight: Institute governance models that ensure architectural adherence, quality, and consistency across all technology domains and that decisions promote scalability, security, and maintainability. Platform & Data Excellence: Establish and promote best practices for platform engineering (DevOps & cloud) and data architecture, in line with a culture of system resilience and data integrity. Cross-Functional Enablement: Collaborate strategically with product managers, engineering managers, and business leaders to translate complex product vision into clear, robust, and well-governed technical architectures and execution plans. Hands-on Delivery & Mentorship: Contribute directly to production code in critical areas, acting as an additional technical coach for engineers and guiding the resolution of the most challenging technical problems. Contribution & Impact: This role is paramount for ensuring the architectural soundness of our core platform as the company evolves and scales. Your expertise will directly result in significantly reduced technical debt, improved system reliability, and an accelerated velocity for delivering new, market-enabling business capabilities. Key measures of success include the sustained stability and high-performance of the core Java and Clojure platform, and the successful, strategic integration of advanced technologies and architectural patterns such as AI-enabled systems and cloud-native solutions. Key responsibilities: Architectural Leadership and Mentorship Partner with the CTO, the Director of Technology Delivery, and Engineering Managers to define, communicate, and execute the technology strategy and architectural roadmap for the lending and data platforms. Lead the architectural design and review process for major platform initiatives. Help mentor and coach engineers, fostering a culture of technical excellence and architectural discipline. Define technology standards, development methodologies, and security best practices for the engineering organization. Technical Excellence and Quality Assurance Help instill a culture of technical rigour, passionately advocating for approaches such as Test-Driven Development and secure coding practices. Lead complex code and design reviews, setting an uncompromisingly high bar for code quality, maintainability, and security across the platform. Identify, pilot, and promote emerging technologies and engineering practices, including cutting edge AI practices. Technology Roadmapping for Software, Platform & Data Drive the architectural evolution towards service-based design, event-driven systems, and a modern, highly scalable data architecture. Shape the strategic direction for hosting infrastructure, containerisation, and CI/CD pipelines in collaboration with Platform Engineering. Review major technical designs and ensure alignment with the long-term system architecture and business objectives. System Resilience and Data Governance Design and promote architectural patterns for high availability, fault tolerance, and security across the entire technology stack. Drive data modeling, data architecture, and the evolution of data store platforms to ensure data integrity, quality, and performance at scale. Proactively identify and resolve systemic architectural risk and technical debt. Delivery Enablement and Performance Optimization Consult on the execution of the technical roadmap, providing architectural clarity and hands-on advice to unblock teams and accelerate delivery. Contribute directly to production code in critical architectural areas and highly complex situations (e.g., core domain logic, common libraries, performance-sensitivity), staying close to the technical implementation. Qualifications and Experience: Bachelor's degree in Computer Science, Software Engineering, or a related field. 10+ years of professional experience in software development, cloud, DevOps, and architectural design, with a minimum of 3 years focused on architecting large-scale, distributed systems. Strong demonstrated expertise in multiple programming languages. Proven expertise in architectural design and operation of event-driven service-based architectures at large scale. Demonstrated ability to define and govern engineering best practices, including TDD and clean code principles. Experience with multiple data store management approaches (e.g., relational vs. NoSQL databases), data modelling, and associated technologies. Expert-level knowledge of CI/CD, DevOps practices, containerisation, and public cloud platforms (AWS, Azure, or GCP). Exceptional communication and influencing skills, with a track record of driving complex technical decisions across multiple teams. Preferred Qualifications: Strong technical background and deep proficiency in Java and Spring Boot. Hands-on experience or architectural oversight in Clojure or other functional programming languages. Proven experience with data architecture, data warehousing concepts, and ETL/ELT pipelines. Experience with monitoring and observability tools (e.g., Prometheus, Grafana, ELK stack). Experience working in a regulated FinTech or financial services environment. The ideal candidate is someone who: Is an architectural thinker: Functions as a self-driven technology leader capable of defining the future-state architecture, from initial concept to robust, production-ready system design. Is a strategic leader: Functions as a technical visionary, capable of defining and communicating a clear, long-term technical roadmap that aligns with Ezra’s mission to provide digital lending solutions. Is a hands-on architectural driver: Acts as a technical authority who can own projects end-to-end as well as support engineers in complex implementations. Builds architectural alignment: Excels at influencing, collaborating with, and guiding engineering leaders and product managers across multiple domains to achieve a cohesive, scalable system. Drives architectural excellence: Possesses the deep technical knowledge to guide and approve complex designs, ensuring scalability, resilience, and security across software, platform, and data layers. Ensures platform resilience: Proactively manages system risk, creates alignment around risk categorisation and treatment approaches, and co-owns outcomes. Champions quality: Is a passionate advocate for engineering and architectural best practices, driving a consistent standard for quality and performance. Embraces evolution: Stays current with industry trends, strategically integrating new technologies like AI and cloud-native tools while ensuring stability in the core platform. Company overview: Ezra provides B2B digital lending solutions for emerging markets in partnership with mobile and digital wallet operators and financial service providers. Ezra supports 24 operations in 23 countries, across Africa, the Middle East and Asia. Our key office locations are in Nairobi, Kenya and Dubai, UAE. Our flagship products are Airtime Credit Services (ACS), Nano and BNPL. ACS is an airtime or data advance offered to prepaid mobile subscribers at the point of low credit. Nano is a micro cash advance offered to mobile wallet users on demand. BNPL facilitates payment installments for products and services As a FinTech company, our business is entirely technology and data driven, from determining subscriber eligibility, generating relevant offers, managing risk, loan issuance, recovery, optimizing performance and reporting, reconciliation and billing. Each day we process approximately 21M loan requests and 1.4 TB of data across our markets. This process needs to be robust, reliable and secure. But it doesn’t end there. We’re exploring new ways of using our platform and transactional data to improve our products and develop new product opportunities.", "summaryDescription" : "Principal Architect at Ezra. Skills: Enterprise architecture, Platform engineering, Data architecture, AI integration. Co-define technical architecture. Champion technical standards", "postedDate" : "2026-06-13T21:58:44.704", "createdAt" : "2026-06-13T21:58:44.704", "lastUpdated" : "2026-06-15T07:57:08.772", "ingestTimestamp" : "2026-06-13T21:58:44.704", "mongoId" : "6a2ca5bb74d8ee00a09b7e78", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "Service-based design", "Event-driven systems", "Data modeling", "High availability", "Fault tolerance", "Secure coding", "Mentorship", "Leadership", "Enterprise architecture", "Platform engineering", "Data architecture", "AI integration", "System design", "Technical strategy", "Architectural oversight", "Roadmap planning", "Risk management", "Lending platforms", "Data platforms", "FinTech", "Digital lending", "Mobile wallets", "Cloud-native solutions", "AI-enabled systems", "Containerisation", "CI/CD pipelines", "Data integrity", "System resilience" ], "skillCount" : 28, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Executive", "dataQualityScore" : 1.0, "_score" : 961.4513, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "FinTech", "llmIndustryConfidence" : 0.98 }, { "id" : "6a305b45f292fd229cf5bb6f", "title" : "Principal Software Engineer, Physics", "company" : "Roblox", "industry" : "Technology", "salary" : { "min" : 279120.0, "max" : 332440.0, "currency" : "CAD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Vancouver, British Columbia, Canada", "locations" : [ "Vancouver", "British Columbia", "Canada" ], "timestamp" : "2026-06-16T08:32:27.160", "fingerprint" : "6887ba69bf29ec731c1d862cc8354f877d3b8b39eadbadd550332d640ffe5781", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://careers.roblox.com/jobs/7998360?gh_jid=7998360", "externalId" : "7998360", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Vancouver", "state" : "British Columbia", "country" : "Canada", "continent" : "na", "source" : "llm", "workMode" : "hybrid", "geo" : "49.2608724,-123.1139520" } ], "locationText" : "Vancouver, British Columbia, Canada", "employmentType" : "FULL_TIME", "experienceMinYears" : 8, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "remoteFriendly" : true, "rawDescription" : "Every day, tens of millions of people come to Roblox to explore, create, play, learn, and connect with friends in 3D immersive digital experiences– all created by our global community of developers and creators. At Roblox, we’re building the tools and platform that empower our community to bring any experience that they can imagine to life. Our vision is to reimagine the way people come together, from anywhere in the world, and on any device. We’re on a mission to connect a billion people with optimism and civility, and looking for amazing talent to help us get there. A career at Roblox means you’ll be working to shape the future of human interaction, solving unique technical challenges at scale, and helping to create safer, more civil shared experiences for everyone. From the early days, simulated physics has been the foundation of the way users build in Roblox. Our physics engine enables dynamic environments with emergent behavior making games more immersive and exciting. The Physics team develops Roblox's proprietary distributed physics engine. Our team implements the mathematical models behind our dynamic simulation engine, and ships engine APIs and tools that developers use every day. These models incorporate rigid body dynamics arising from external forces, collisions, and constraints while optimizing for real-time performance. We work on integrating the low level physics solver into the rest of the engine for online gameplay across multiple platforms. You will report to the Physics Environment Engineering Manager. You Will: Innovate and implement powerful physics features that empower Roblox developers to create immersive and dynamic experiences. Drive innovation through research and rapid prototyping, translating new ideas into practical solutions that stand the test of time. Optimize and enhance the robustness and performance of the physics engine and its integrations, ensuring a seamless user experience. Collaborate with internal teams and external developers, providing expert support and guidance to improve feature utilization and resolve technical challenges. You Have: Extensive C++ Development: 8+ years of professional experience writing high-performance, optimized C++ code (2+ years if with an advanced degree). Performance Engineering: Demonstrated ability to use multithreading and SIMD optimization techniques to enhance application efficiency with knowledge of modern computer architecture and its impact on software performance. Physics and Numerical Methods Experience: Practical experience applying numerical methods to solve problems in real-time physics simulation. Real-Time Physics Expertise: Proven experience developing and deploying real-time and online multiplayer physics simulations. Physics SDK Familiarity: Hands-on experience integrating and applying physics SDKs such as PhysX, Havok, and Bullet. Educational Background: Bachelor's or advanced degree in Computer Science, Mathematics, Physics, Engineering, or equivalent demonstrated experience. For roles that are based at our headquarters in Vancouver, BC, Canada: The starting base pay for this position is as shown below. The actual base pay is dependent upon a variety of job-related factors such as professional background, training, work experience, location, business needs and market demand. Therefore, in some circumstances, the actual salary could fall outside of this expected range. This pay range is subject to change and may be modified in the future. All full-time employees are also eligible for equity compensation and for benefits as described on this page. Annual Salary Range $279,120—$332,440 CAD Roles that are based in an office are onsite Tuesday, Wednesday, and Thursday, with optional presence on Monday and Friday (unless otherwise noted). Roblox provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws. Roblox also provides reasonable accommodations to candidates with qualifying disabilities or religious beliefs during the recruiting process. For US based roles only, please note the Company may not be able to employ candidates for this role who have United States work authorization related to certain U. S. visa categories, or support future H-1B sponsorship at this time.", "summaryDescription" : "Principal Software Engineer, Physics at Roblox", "postedDate" : "2026-06-15T23:25:56.708", "createdAt" : "2026-06-15T23:25:56.708", "lastUpdated" : "2026-06-16T08:32:27.160", "ingestTimestamp" : "2026-06-15T23:25:56.708", "mongoId" : "6a305b45f292fd229cf5bb6f", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Lead", "dataQualityScore" : 0.8888889, "_score" : 959.1084, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.98 }, { "id" : "69f9b8024c40e2acd1113f01", "title" : "Sr. Security Engineer, Stores Application Security", "company" : "ADCI", "industry" : "Systems, Quality, Security Engineering, Systems Security Engineering, amazon security", "salary" : { "min" : 2200000.0, "max" : 3500000.0, "currency" : "INR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Senior Security Engineer in Bengaluru, India, adjusted for the technology industry and company size." }, "location" : "Bengaluru, Karnataka, IND", "locations" : [ "Bengaluru, Karnataka, IND" ], "timestamp" : "2026-06-15T04:38:45.157", "fingerprint" : "1a627775c1f738d2ceed2186bdc8d714cf9f9a375bfef8f768f071f2439a424e", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.jobs/jobs/10410761/apply", "externalId" : "9a7c8c8e-4b01-4e5f-a281-f21b41827e9e", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Bengaluru", "state" : "Karnataka", "country" : "India", "continent" : "as", "source" : "llm", "workMode" : "onsite", "geo" : "12.9767936,77.5900820" } ], "locationText" : "Bengaluru, Karnataka, India", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "Java, Python, Javascript, Perl, Bash, Ruby, PowerShell, AWS", "professionalSkills" : [ "Application security", "Offensive security", "Systems security", "Threat modeling", "Design review", "Architecture review", "Source code review", "Security vulnerabilities", "Exploit techniques", "Remediation methods", "Network architecture", "Enterprise IT systems", "Security strategies", "Technical risk" ], "hardSkillsList" : [ "Secure code review", "Threat modeling", "Security architecture", "Adversarial security analysis", "Security automation" ], "softSkillsList" : [ "Leadership", "Influence" ], "hardSkills" : [ { "name" : "Secure code review", "level" : "intermediate" }, { "name" : "Threat modeling", "level" : "intermediate" }, { "name" : "Security architecture", "level" : "intermediate" }, { "name" : "Adversarial security analysis", "level" : "intermediate" }, { "name" : "Security automation", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" }, { "name" : "Influence" } ], "majorSkills" : "Application security, Threat modeling, Secure code review, Security architecture", "majorSkillsList" : [ "Application security", "Threat modeling", "Secure code review", "Security architecture" ], "coreResponsibilities" : "Create threat models, Update threat models, Maintain threat models, Provide security architecture guidance, Provide security design guidance, Perform manual secure code review, Perform automated secure code review, Develop security automation tools, Perform first party application security research, Perform adversarial security analysis, Augment manual effort, Provide security training, Conduct security outreach, Solve security problems, Influence team process, Influence partner process, Influence team priorities, Influence partner priorities, Influence team choices, Influence partner choices, Improve outcomes", "teamCollaboration" : "Collaborate with software development teams; Collaborate with security stakeholders; Guide partners towards secure solutions; Harmonize disparate opinions", "domainKnowledge" : "Cloud-native architecture; AWS services; Network architecture; Enterprise IT systems; Software Development Lifecycle", "domainList" : [ "cloud-native-architecture", "aws-services", "network-architecture", "enterprise-it-systems", "software-development-lifecycle" ], "domainSpecificKnowledge" : [ "Cloud-native architecture", "AWS services", "Network architecture", "Enterprise IT systems", "Software Development Lifecycle" ], "communicationSkills" : "Articulate risks; Explain technical risks", "continuousLearning" : "Knowledge sharing; Training resources; Career-advancing resources", "innovationCreativity" : "Innovate in reducing on-call time; Innovate in security practices", "problemSolvingSkills" : "Independently solve security problems; Novel methods or approaches", "qualificationsBasic" : "5+ years identifying security issues, 5+ years developing mitigation plans, Mentor or tech lead experience, BS in Computer Science, 5+ years application security, 5+ years offensive security, 5+ years systems security, Application security background, Focus on scalable solutions, Solid understanding of threat modeling, Solid understanding of design review, Solid understanding of architecture review, Solid understanding of manual source code review, Solid understanding of security vulnerabilities, Solid understanding of attacker exploit techniques, Solid understanding of remediation methods, Excellent understanding of network architecture, Excellent understanding of enterprise IT systems, Excellent understanding of AWS, Programming/Scripting skills, Excellent written communication skills, Excellent verbal communication skills, Excellent problem-solving ability, Ability to work in ambiguous environments, Ability to work in evolving environments, Identify and remove bottlenecks, Collaborate with security stakeholders, Develop security strategies, Explain complex technical risks", "qualificationsPreferred" : "Experience applying threat modeling, Experience applying risk identification techniques, Security in service-oriented architectures, Security in microservices, Security in web services, Assessing and prioritizing technical risk, Designing, building, and securing AWS architectures, Convey complex technical concepts effectively, Enhance team productivity, Threat modeling expertise, Secure coding expertise, Identity and access management expertise, Authentication expertise, Software development expertise, Cryptography expertise, Security research expertise, AWS services expertise, Network architecture expertise, Enterprise IT environments expertise, Security activities across SDLC phases, Security design reviews experience, Threat modeling experience, Secure code reviews experience, Security testing experience, Drive continuous improvements, Drive scalable improvements, Implement security strategies", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "In Amazon Stores, we ship some of the widest arrays of technology found at any company. From amazon.com to world class machine learning pipelines, from innovative digital healthcare to no-checkout retail, we push the boundaries of technology in every direction using the globe’s largest AWS deployment. As an AppSec engineer, you will collaborate with software development teams to ensure we keep our customers safe while developing these novel services. In a given day, you might be inspecting an application’s code for security issues, building a new framework to help our software developers build faster and more securely, or fine-tuning the design for a new service alongside its software developers. The ideal candidate combines technical acumen with an ability to lead by influence and communicate clearly. Technically, this person will be a security generalist with one or more areas of deep expertise. In their communication, they will clearly articulate risks to technical and non-technical audiences alike. Interpersonally, successful candidates will effectively harmonize disparate opinions while effectively prioritizing risks to guide their partners towards secure solutions. Our organization prizes its employees, and we show it through investing in work-life harmony. We have dedicated resources that consistently innovate in reducing on-call time and ensuring the team spend their time on the highest-value tasks. Join the stores AppSec organization to work hard, have fun, and make history! Our team puts a high value on work-life balance. Striking a healthy balance between your personal and professional life is crucial to your happiness and success here, which is why we aren’t focused on how many hours you spend at work or online. Instead, we’re happy to offer a flexible schedule so you can have a more productive and well-balanced life—both in and outside of work. Key job responsibilities - Creating, updating, and maintaining threat models for a wide variety of software projects - Security architecture and design guidance - Manual and Automated Secure Code Review, primarily in Java, Python and Javascript - Development of security automation tools - First party application security research - Adversarial security analysis using innovative tools to augment manual effort - Security training and outreach for internal development teams - Independently solve security problems that require novel methods or approaches - Influence your team’s and partners’ process, priorities, and choices to improve outcomes - First party application security research About the team Diverse Experiences Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying. Why Amazon Security At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve. Inclusive Team Culture In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices. Mentorship and Career growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional. #Joinstoresappsec Basic Qualifications: - 5+ years of work in identifying security issues and risks, and developing mitigation plans experience - Experience working in identifying security issues and risks, and developing mitigation plans - Experience as a mentor, tech lead or leading an engineering team - BS in Computer Science, Information Security, 5+ years of demonstrated experience in areas such as application security, offensive security and/or systems security and have a strong application security background with a focus on scalable solutions - Solid understanding of threat modeling, design and architecture review, manual source code review, security vulnerabilities, attacker exploit techniques, and methods for their remediation and have excellent understanding of network architecture, enterprise IT systems and cloud such as AWS - Programming/Scripting skills (E.g: Java, Python, Perl, Bash, Ruby, PowerShell, etc.) Excellent written and verbal communication skills and strong problem-solving ability and the ability to work in ambiguous and constantly evolving environment - Can identify and remove bottlenecks for your teammates, both in process and technology and collaborate with security stakeholders to develop security strategies and Can explain complex technical risks in simple, clear language that non-technical stakeholders can easily understand and act upon. Preferred Qualifications: - Experience applying threat modeling or other risk identification techniques or equivalent - Experience with security in service-oriented architectures/microservices and web services - Demonstrated strong judgment in assessing and prioritizing technical risk, with a solid application security background and a focus on scalable solutions. - Proven experience designing, building, and securing complex AWS architectures. - Excellent written and verbal communication skills, with the ability to convey complex technical concepts effectively. - Proactive in identifying and eliminating bottlenecks across processes and technology to enhance team productivity. - Experience in one or more of the following areas: threat modeling, secure coding, identity and access management (IAM), authentication, software development, cryptography, or security research. - Strong expertise in AWS services, network architecture, and enterprise IT environments. - Hands-on experience performing security activities across one or more phases of the Software Development Lifecycle (SDLC), including security design reviews, threat modeling, secure code reviews, and security testing. - Proven ability to drive continuous, scalable improvements in security controls and practices, and to collaborate effectively with stakeholders to develop and implement security strategies. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.", "summaryDescription" : "Sr. Security Engineer, Stores Application Security at ADCI. Skills: Application security, Threat modeling, Secure code review, Security architecture. Create threat models. Update threat models", "postedDate" : "2026-06-13T17:15:50.861", "createdAt" : "2026-06-13T17:15:50.861", "lastUpdated" : "2026-06-15T04:38:45.157", "ingestTimestamp" : "2026-06-13T17:15:50.861", "mongoId" : "69f9b8024c40e2acd1113f01", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.jobs/jobs/10410761/apply", "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "Secure code review", "Threat modeling", "Security architecture", "Adversarial security analysis", "Security automation", "Leadership", "Influence", "Application security", "Offensive security", "Systems security", "Design review", "Architecture review", "Source code review", "Security vulnerabilities", "Exploit techniques", "Remediation methods", "Network architecture", "Enterprise IT systems", "Security strategies", "Technical risk", "Cloud-native architecture", "AWS services", "Software Development Lifecycle" ], "skillCount" : 23, "jobCategory" : "engineering", "dataQualityScore" : 1.0, "_score" : 956.57263, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true }, { "id" : "69164daa70f0b99d586f3432", "title" : "Principal Software Engineer", "company" : "Amazon Photos", "industry" : "Software Development, alexa and amazon devices", "salary" : { "min" : 6500000.0, "max" : 9500000.0, "currency" : "INR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for Principal Software Engineer in Bengaluru, India, adjusted for executive seniority at a large technology company like Amazon." }, "location" : "Bengaluru, Karnataka, IND", "locations" : [ "Bengaluru, Karnataka, IND" ], "timestamp" : "2026-06-15T00:42:55.082", "fingerprint" : "771bae8993421dd4469b44ebe392fd3007a8f396642e935bd2e12c064f045164", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.com/jobs/3121994/apply", "externalId" : "19061753-a351-4945-a7e9-d46436d43160", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Bengaluru", "state" : "Karnataka", "country" : "India", "continent" : "as", "source" : "llm", "workMode" : "onsite", "geo" : "12.9767936,77.5900820" } ], "locationText" : "Bengaluru, Karnataka, India", "employmentType" : "FULL_TIME", "minimumEducation" : "Bachelor's", "experienceMinYears" : 10, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "Cloud infrastructure, Computer vision, Machine learning, Distributed systems", "professionalSkills" : [ "System design", "Technical strategy" ], "hardSkillsList" : [ "Photo processing", "Video processing" ], "softSkillsList" : [ "Leadership", "Mentoring" ], "hardSkills" : [ { "name" : "Photo processing", "level" : "intermediate" }, { "name" : "Video processing", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" }, { "name" : "Mentoring" } ], "majorSkills" : "AI/ML, Cloud infrastructure, Distributed systems", "majorSkillsList" : [ "AI/ML", "Cloud infrastructure", "Distributed systems" ], "coreResponsibilities" : "Architect technical decisions, Drive innovation, Provide technical leadership, Influence architecture, Influence engineering practices, Partner with senior leadership, Define technical strategy, Define roadmap, Mentor engineers, Mentor leaders, Raise technical bar, Identify technical challenges, Solve technical challenges, Process photo content, Process video content, Store photo content, Store video content, Serve photo content, Serve video content, Champion operational excellence, Champion engineering best practices", "teamCollaboration" : "Across teams; With senior leadership", "domainKnowledge" : "Photo services; Video services; AI/ML capabilities; Cloud infrastructure; Computer vision; Machine learning; Distributed systems", "domainList" : [ "photo-services", "video-services", "ai-ml-capabilities", "cloud-infrastructure", "computer-vision", "machine-learning", "distributed-systems" ], "domainSpecificKnowledge" : [ "Photo services", "Video services", "AI/ML capabilities", "Cloud infrastructure", "Computer vision", "Machine learning", "Distributed systems" ], "innovationCreativity" : "Drive innovation", "problemSolvingSkills" : "Solve complex technical challenges", "qualificationsBasic" : "Bachelor's degree in Computer Science, 10+ years experience", "qualificationsPreferred" : "Experience designing large-scale systems, Knowledge of object-oriented design, Knowledge of data structures, Knowledge of algorithms", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "At Amazon Photos, we're revolutionizing how people preserve and relive their most precious memories. Our service delights millions of customers across mobile, web, desktop, Amazon devices, and Alexa experiences. We're seeking a Principal Software Development Engineer to drive technical innovation and architecture across Amazon Photos. This role will shape the technical strategy for our next generation of photo and video services, focusing on scaling our infrastructure, advancing our AI/ML capabilities, and creating seamless experiences across mobile, web, and Amazon devices. As a senior technical leader, you'll work across teams to solve complex engineering challenges while serving millions of customers who trust us with their most precious memories. Key job responsibilities • Own and architect critical technical decisions that impact Amazon Photos' long-term success and scalability • Drive innovation in areas such as cloud infrastructure, computer vision, machine learning, and distributed systems • Provide technical leadership across multiple teams, influencing architecture and engineering practices • Partner with senior leadership to define technical strategy and roadmap • Mentor engineers and leaders while raising the technical bar across the organization • Identify and solve complex technical challenges around processing, storing, and serving massive amounts of photo and video content • Champion operational excellence and engineering best practicesOwn and architect critical technical decisions that impact Amazon Photos' long-term success and scalability • Drive innovation in areas such as cloud infrastructure, computer vision, machine learning, and distributed systems • Provide technical leadership across multiple teams, influencing architecture and engineering practices • Partner with senior leadership to define technical strategy and roadmap • Mentor engineers and leaders while raising the technical bar across the organization • Identify and solve complex technical challenges around processing, storing, and serving massive amounts of photo and video content • Champion operational excellence and engineering best practices About the team Amazon Photos helps millions of customers preserve and relive their memories through innovative technology. Our team builds and operates services that process billions of photos and videos. We're tackling exciting technical challenges in cloud infrastructure, AI/ML, computer vision, and distributed systems at massive scale. Our culture emphasizes deep technical expertise, customer obsession, and long-term thinking. Basic Qualifications: • Bachelor's degree and/or Master's degree in Computer Science or equivalent. • 10+ years experience in building large scale distributed systems Preferred Qualifications: • Experience designing and building large-scale systems in a multi-tiered, distributed environment • Knowledge of object-oriented design, data structures, and algorithms Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.", "summaryDescription" : "Principal Software Engineer at Amazon Photos. Skills: AI/ML, Cloud infrastructure, Distributed systems. Architect technical decisions. Drive innovation", "postedDate" : "2026-06-13T00:04:45.035", "createdAt" : "2026-06-13T00:04:45.035", "lastUpdated" : "2026-06-15T00:42:55.082", "ingestTimestamp" : "2026-06-13T00:04:45.035", "mongoId" : "69164daa70f0b99d586f3432", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.com/jobs/3121994/apply", "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "Photo processing", "Video processing", "Leadership", "Mentoring", "AI/ML", "Cloud infrastructure", "Distributed systems", "System design", "Technical strategy", "Photo services", "Video services", "AI/ML capabilities", "Computer vision", "Machine learning" ], "skillCount" : 14, "jobCategory" : "engineering", "dataQualityScore" : 1.0, "_score" : 954.54144, "daysOld" : 2, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology" }, { "id" : "6a2ca51674d8ee00a09b49ea", "title" : "Principal Architect", "company" : "Renaissance Learning EMEA APAC", "industry" : "Education", "salary" : { "min" : 125000.0, "max" : 175000.0, "currency" : "GBP", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for Principal Architect in Houghton-Le-Spring, UK, adjusted for executive seniority and the education industry." }, "location" : "Houghton-Le-Spring", "locations" : [ "Houghton-Le-Spring" ], "timestamp" : "2026-06-15T08:39:22.479", "fingerprint" : "b182bf167307632fcd8466b8f12e73976e18a088ccf222dca0bbff22b81fe317", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.greenhouse.io/renaissancelearning-emea/jobs/5240085008", "externalId" : "5240085008", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Houghton-Le-Spring", "country" : "United Kingdom", "continent" : "eu", "source" : "llm", "workMode" : "hybrid", "geo" : "54.8406536,-1.4699279" } ], "locationText" : "Houghton-Le-Spring, United Kingdom", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "APIs, Cloud-native architectures", "professionalSkills" : [ "System design", "Technical strategy", "Solution assurance" ], "hardSkillsList" : [ "Architecture governance", "Technical standards", "Technical roadmaps" ], "softSkillsList" : [ "Leadership", "Mentoring" ], "hardSkills" : [ { "name" : "Architecture governance", "level" : "intermediate" }, { "name" : "Technical standards", "level" : "intermediate" }, { "name" : "Technical roadmaps", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" }, { "name" : "Mentoring" } ], "majorSkills" : "Architecture Leadership, Technical Strategy, Cross-Functional Leadership", "majorSkillsList" : [ "Architecture Leadership", "Technical Strategy", "Cross-Functional Leadership" ], "coreResponsibilities" : "Define architecture principles, Establish architecture review forums, Drive consistency technical approaches, Maintain visibility technical decisions, Own technical roadmap, Identify opportunities, Identify technical debt, Identify platform risks, Identify modernisation priorities, Support platform scalability, Support AI enablement, Evaluate emerging technologies, Guide adoption decisions, Bring together SMEs, Facilitate collaborative decision-making, Provide architectural guidance, Provide design reviews, Provide solution assurance, Encourage reuse, Encourage standardisation, Encourage platform thinking, Act as technical liaison, Represent regional requirements, Communicate architectural direction, Communicate technical trade-offs, Build relationships, Promote engineering excellence, Promote technical quality, Support AI-enabled development, Support innovation, Mentor engineers, Mentor technical leaders", "teamCollaboration" : "Cross-functional teams; Global teams; Technical teams; Business teams", "projectManagementSkills" : [ "Roadmap planning" ], "domainKnowledge" : "AI-enabled operating model; Platform-centric operating model; Educational assessments; Data analytics; Literacy solutions; Maths solutions", "domainList" : [ "ai-enabled-operating-model", "platform-centric-operating-model", "educational-assessments", "data-analytics", "literacy-solutions", "maths-solutions" ], "domainSpecificKnowledge" : [ "AI-enabled operating model", "Platform-centric operating model", "Educational assessments", "Data analytics", "Literacy solutions", "Maths solutions" ], "communicationSkills" : "Technical concepts; Architectural direction; Technical trade-offs", "innovationCreativity" : "AI enablement; Innovation", "problemSolvingSkills" : "Technical decisions; Solution assurance", "specialRequirements" : "DBS checks, Background checks, Work permit required", "qualificationsBasic" : "Senior architecture leadership roles, Technical leadership roles, SaaS organizations experience, Product-led organizations experience, Software engineering background, Distributed systems background, APIs background, Cloud-native architectures background, Establish architecture governance, Establish technical standards, Influence technical direction, Work across Engineering, Work across Infrastructure, Work across Security, Work across Data, Work across QA, Work across Product, Define technical roadmaps, Align technology strategy, Complex organizations experience, Internationally distributed organisations experience, Excellent communication skills, Facilitation skills, Balance strategic vision, Practical delivery realities", "qualificationsPreferred" : "EdTech environments experience, Global platform discussions representation", "workSiteFlexibility" : "Hybrid", "rawDescription" : "About Us Renaissance® is a global leader in education technology. We help schools and school groups in the UK and around the world with educational assessments, practice and intervention solutions, and data analytics. Renaissance now incorporates GL Assessment (known internationally as GL Education), too – a leading provider of educational assessments. Together, our assessments offer the ideal starting point to help teachers understand their students’ strengths and pinpoint areas of need. Our teaching and learning tools then provide effective next steps, with online literacy and maths solutions that meet students exactly where we are. Worldwide, we support over 18 million students, operating in over 100 countries. We're evolving toward an AI-enabled, platform-centric operating model and need a Principal Architect to provide technical leadership across our Global Technology function. You'll shape our technical direction, establish governance, and ensure architectural alignment across platforms, products, and services—without being pulled into day-to-day delivery. You'll be a facilitator and technical leader, bringing together experts across disciplines to define standards, evaluate solutions, and drive sound technical decisions. What you'll be getting up to with us: Architecture Leadership & Governance Define architecture principles, standards, and governance that enable (not block) delivery Establish architecture review forums and decision-making processes Drive consistency in technical approaches, tooling, and platform standards Maintain visibility and accountability for significant technical decisions Technical Strategy & Roadmap Own and maintain the technical roadmap aligned with business and product strategy Identify opportunities, technical debt, platform risks, and modernisation priorities Support platform scalability and AI enablement initiatives Evaluate emerging technologies and guide adoption decisions Cross-Functional Leadership Bring together SMEs across Engineering, Infrastructure, Security, Data, QA, and Product Facilitate collaborative decision-making on complex initiatives Provide architectural guidance, design reviews, and solution assurance Encourage reuse, standardisation, and platform thinking Stakeholder & Global Collaboration Act as technical liaison with global teams, including US-based functions Represent regional requirements in global platform discussions Communicate architectural direction and technical trade-offs clearly to all audiences Build strong relationships across technical and business teams Continuous Improvement Promote engineering excellence and technical quality Support AI-enabled development and innovation Mentor engineers and technical leaders Experience we’d love to see includes: Significant experience in senior architecture or technical leadership roles within SaaS or product-led organisations Experience in EdTech or SaaS environments Strong background in software engineering, distributed systems, APIs, and cloud-native architectures Proven ability to establish architecture governance and technical standards across multiple teams Experience influencing technical direction without direct line management authority Ability to work effectively across Engineering, Infrastructure, Security, Data, QA, and Product functions Track record defining technical roadmaps and aligning technology strategy with business objectives Experience in complex, multi-team, or internationally distributed organisations Excellent communication skills—explaining technical concepts to both technical and non-technical audiences Strong facilitation skills to drive discussions to conclusions and establish accountability Ability to balance strategic vision with practical delivery realities \uD83C\uDFE2Additional information: \uD83D\uDCCDThis is role is a Hybrid role based out of our Houghton Le Spring office – the team come together a couple of times a week. There may be travel to other offices on occasion. Please note: Applications will be reviewed week commencing 22nd June. \uD83C\uDF81Benefits: 25 Days holiday a year plus Bank Holidays (3 to be used for our Christmas shutdown) A day off for your birthday to celebrate in style! Workplace Nursery scheme 5 volunteering days a year to use for the causes of your choice Access to a benefits and discount platform with access to 1000’s of discounts at retailers, leisure attractions and restaurants BUPA Healthcare, Life assurance, Permanent health insurance Pension scheme with enhanced employer contribution – up to 8% Season ticket loan and EAP Unfortunately we are unable to offer sponsorship for this position. We have an ongoing commitment to Diversity, Equity and Inclusion and have taken strides to become a more welcoming and inclusive workplace, including the introduction of our DEI Matters Network which is owned and driven by our staff. We are an equal opportunities employer. We encourage and welcome applications from all underrepresented groups, as we believe and strive for community representation within our organisation. If you have a disability and would prefer to apply in a different format or would like us to make reasonable adjustments to enable you to apply or attend any interview, please contact us and we will talk this through with you. All your information will be kept confidential according to GDPR guidelines. Please note that we can only consider applicants who already hold a full work permit. This role is subject to DBS and background checks.", "summaryDescription" : "Principal Architect at Renaissance Learning EMEA APAC. Skills: Architecture Leadership, Technical Strategy, Cross-Functional Leadership. Define architecture principles. Establish architecture review forums", "postedDate" : "2026-06-14T06:21:47.949", "createdAt" : "2026-06-14T06:21:47.949", "lastUpdated" : "2026-06-15T08:39:22.479", "ingestTimestamp" : "2026-06-14T06:21:47.949", "mongoId" : "6a2ca51674d8ee00a09b49ea", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "100k-150k", "hasSalary" : false, "allSkills" : [ "Architecture governance", "Technical standards", "Technical roadmaps", "Leadership", "Mentoring", "Architecture Leadership", "Technical Strategy", "Cross-Functional Leadership", "System design", "Technical strategy", "Solution assurance", "Roadmap planning", "AI-enabled operating model", "Platform-centric operating model", "Educational assessments", "Data analytics", "Literacy solutions", "Maths solutions" ], "skillCount" : 18, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Executive", "dataQualityScore" : 0.8888889, "_score" : 946.7446, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Education", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2cc39874d8ee00a0a09c86", "title" : "Principal Software Engineer", "company" : "loveholidays", "industry" : "Tech", "salary" : { "min" : 120000.0, "max" : 180000.0, "currency" : "GBP", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for Principal Software Engineer in London, UK, adjusted for executive seniority and the travel industry." }, "location" : "London", "locations" : [ "London" ], "timestamp" : "2026-06-15T10:39:17.074", "fingerprint" : "3dbcde2af8b27f554981e6b63e394a8079f74115ae59657b28288bf555a32af2", "source" : "ashby", "language" : "en", "applyUrl" : "https://jobs.ashbyhq.com/loveholidays/912290a6-df2b-443e-b4c7-4cbe1bdf0c5a/application", "externalId" : "912290a6-df2b-443e-b4c7-4cbe1bdf0c5a", "industryFunction" : { }, "structuredLocations" : [ { "city" : "London", "country" : "United Kingdom", "continent" : "eu", "source" : "llm", "workMode" : "onsite", "geo" : "51.5074456,-0.1277653" } ], "locationText" : "London, United Kingdom", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "AI, Cloud", "professionalSkills" : [ "Technical excellence", "Platform governance", "Architectural decisions", "Business outcomes" ], "hardSkillsList" : [ "AI adoption", "Software delivery", "Platform development", "System design" ], "softSkillsList" : [ "Mentoring", "Facilitator" ], "hardSkills" : [ { "name" : "AI adoption", "level" : "intermediate" }, { "name" : "Software delivery", "level" : "intermediate" }, { "name" : "Platform development", "level" : "intermediate" }, { "name" : "System design", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Mentoring" }, { "name" : "Facilitator" } ], "majorSkills" : "AI adoption, Software delivery, System design", "majorSkillsList" : [ "AI adoption", "Software delivery", "System design" ], "coreResponsibilities" : "Own team's functional KPIs, Define measurable outcomes, Help mission teams deliver faster, Help mission teams deliver safer solutions, Solve complex problems, Train others to solve problems, Champion AI adoption, Apply AI to engineering processes, Apply AI to solutions, Coach engineers, Guide engineers' growth, Build tools for Boost team, Improve platform governance, Embed in mission teams, Solve hard tech problems, Instill core engineering principles, Drive initiatives to apply AI, Build better solutions with AI, Improve engineering process with AI, Build tooling for platform development, Build processes for platform development, Accelerate platform development, Enable platform development, Design impactful systems, Oversee impactful systems, Run systems at cloud scale, Write about tech work, Speak about tech work, Raise engineering profile", "teamCollaboration" : "Mission teams; Engineering teams; Cross-functional teams", "projectManagementSkills" : [ "Agile mindset" ], "domainKnowledge" : "Cloud scale; AI tooling; Software delivery; Platform development; Engineering principles; Holiday offers", "domainList" : [ "cloud-scale", "ai-tooling", "software-delivery", "platform-development", "engineering-principles", "holiday-offers" ], "domainSpecificKnowledge" : [ "Cloud scale", "AI tooling", "Software delivery", "Platform development", "Engineering principles", "Holiday offers" ], "toolProficiency" : [ "GitHub" ], "communicationSkills" : "Technical writing; Public speaking", "continuousLearning" : "Individualised training budget", "innovationCreativity" : "AI adoption; Technical innovation", "problemSolvingSkills" : "Complex challenges; Complex technical challenges", "outcomesObjectives" : "Show our impact; Help others succeed", "qualificationsBasic" : "Front-end skills, Agile mindset, Proven track record of delivery", "qualificationsPreferred" : "Experience with AI-powered feature development, Leveraging AI tooling for software delivery, Transforming how we build and deliver software, Working hands-on with engineering teams, Building team capabilities, Promoting sustainable practices, Seasoned facilitator, Pairing with engineers, Leading technical discussions, Navigating architectural decisions, Practical, hands-on collaboration, Identify and scale successful technical patterns, Connecting technical excellence to measurable business outcomes, Building and optimising scalable, high-performance websites", "remoteFriendly" : true, "workSiteFlexibility" : "Flexible", "rawDescription" : "Why Technology at loveholidays? At loveholidays - we trailblaze together. We’re on a mission to open the world to everyone, giving our customers’ unlimited choice, unmatched ease and unmissable value for their next getaway. Our team is the driving force behind our role as our customers’ personal holiday expert - the smart way to get away. Technology at loveholidays underpins our vision to become the most loved OTA in Europe. We drive cutting-edge innovation and technical excellence to futureproof the business. Our systems process trillions of daily holiday offers, we deploy over a thousand times a month, serving thousands of requests per second. This is where you can accelerate your growth by solving complex challenges and broadening your skillset. Join us to create impact for our future in an exciting new chapter, owning your success and contributing to shared goals. We actively talk about technology https://tech.loveholidays.com/ and adhere to our key technology principles https://tech.loveholidays.com/the-5-principles-that-helped-scale-loveholidays-7ea0b0fd3df9 that have guided us this far. We are growing and have ambitious plans to expand across Europe, employing the best minds and technology to let us do this. The impact you'll have: As a Principal Engineer in the Boost team, you'll be part of a group of principal engineers who champion technical excellence. The team acts as an enabling function, not a delivery arm. You will embed in other teams to help them improve and work faster. You will be hands-on, leading by example, and coaching others to drive technical excellence and innovation across the company. Your success will be measured by how you help others succeed. Your responsibilities include: - Own the team's functional KPIs, defining the measurable outcomes that show our impact. - Help mission teams deliver faster, safer solutions by solving complex problems and training others to do the same. - Champion AI adoption, applying it to both engineering processes and solutions. - Coach our engineers, guiding their growth. - Build tools to make the Boost team more effective and improve platform governance. We are looking for a candidate with strong front-end skills. You will work across the various tech systems within our platform and be confident in your ability to quickly learn new technologies. We value an agile mindset, and a proven track record of delivery with teams. For a better understanding of our work, refer to some of our blog posts: - How loveholidays is solving the technical excellence paradox https://tech.loveholidays.com/how-loveholidays-is-solving-the-technical-excellence-paradox-933987956758 - Your AI Hates Your Prompts (And So Do You) https://tech.loveholidays.com/your-ai-hates-your-prompts-and-so-do-you-c05f59337b13 - Stop Chasing Ghost Errors: A Systematic Approach to Frontend Error Monitoring That Actually Works https://tech.loveholidays.com/stop-chasing-ghost-errors-a-systematic-approach-to-frontend-error-monitoring-that-actually-works-fe5e1c8790cc - Does website speed contribute to customers booking holidays online? https://tech.loveholidays.com/does-website-speed-contribute-to-customers-booking-holidays-online-f17bd696bc30 - Creating a Zero Surprises Culture https://tech.loveholidays.com/from-firefighting-to-foresight-a-new-culture-of-software-reliability-affcf565f9b3 Or our open source contributions: - github.com/loveholidays/ripley http://github.com/loveholidays/ripley - github.com/loveholidays/phrasebook http://github.com/loveholidays/phrasebook - github.com/loveholidays/po-test http://github.com/loveholidays/po-test - github.com/loveholidays/mcp-html-share http://github.com/loveholidays/mcp-html-share As part of our tech culture, we continuously improve our time to deliver, reduce errors, and generally leave things better than we found them. Your day to day: You will: - Embed in mission teams to solve hard tech problems, coaching engineers hands-on to instill our core engineering principles https://tech.loveholidays.com/the-5-principles-that-helped-scale-loveholidays-7ea0b0fd3df9. - Drive initiatives to apply AI to build better solutions and improve our engineering process. - Build tooling and processes to accelerate and enable our platform development. - Design and oversee impactful systems that run reliably at cloud scale. - Write and speak about our tech work to raise our engineering profile. Your skillset: - Experience with AI-powered feature development and leveraging AI tooling for software delivery, with enthusiasm for transforming how we build and deliver software. - Demonstrable history of working hands-on with engineering teams to solve complex technical challenges, building team capabilities and promoting sustainable practices. - Seasoned facilitator who excels at pairing with engineers, leading technical discussions, and helping teams navigate architectural decisions through practical, hands-on collaboration. - Ability to identify and scale successful technical patterns while connecting technical excellence to measurable business outcomes. - A track record of building and optimising scalable, high-performance websites. Perks of joining us: - Company pension contributions at 5%. - Individualised training budget for you to learn on the job and level yourself up. - Discounted holidays for you, your family and friends. - 25 days of holidays per annum (plus 8 public holidays) increases by 1 day for every second year of service, up to a maximum 30 days per annum. - Ability to buy and sell annual leave. - Cycle to work scheme, season ticket loan and eye care vouchers. At loveholidays, we focus on developing an inclusive culture and environment that encourages personal growth and collective success. Each individual offers unique perspectives and ideas that increase the diversity and effectiveness of our teams. And we value the insight and potential you could bring on our continued journey. The interview journey: 1. 1st stage interview with a member of our Talent Team 2. Introduction to loveholidays Engineering with our VP of Engineering (60 mins) 3. Presentation/Case Study with our VP and CTO (60 mins) 4. Technical interview with 2 of our Principal or Heads of Engineering (60 mins)", "summaryDescription" : "Principal Software Engineer at loveholidays. Skills: AI adoption, Software delivery, System design. Own team's functional KPIs. Define measurable outcomes", "createdAt" : "2026-06-14T04:13:37.035", "lastUpdated" : "2026-06-15T10:39:17.074", "ingestTimestamp" : "2026-06-14T04:13:37.035", "mongoId" : "6a2cc39874d8ee00a0a09c86", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "100k-150k", "hasSalary" : false, "allSkills" : [ "AI adoption", "Software delivery", "Platform development", "System design", "Mentoring", "Facilitator", "Technical excellence", "Platform governance", "Architectural decisions", "Business outcomes", "Agile mindset", "Cloud scale", "AI tooling", "Engineering principles", "Holiday offers", "GitHub" ], "skillCount" : 16, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Executive", "dataQualityScore" : 0.8888889, "_score" : 940.0765, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Travel", "llmIndustryConfidence" : 0.98 }, { "id" : "694ae6ce70f0b99d589b27fe", "title" : "Sr. Application Architect", "company" : "Hyundai Capital America", "salary" : { "min" : 165000.0, "max" : 220000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Sr. Application Architect in Irvine, United States, adjusted for seniority, FinTech industry, and company size." }, "location" : "United States-California-Irvine", "locations" : [ "United States-California-Irvine", "
Headquarters 1 (HCA_HQ1)
3161 Michelson Dr. Ste 1900
Irvine, 92612

" ], "timestamp" : "2026-06-15T22:58:24.729", "fingerprint" : "29c9b671e768debd6696a3f730993e9d8c9c020cf369afc625356367ac191124", "source" : "taleo", "language" : "en", "applyUrl" : "https://hyundaicapital.taleo.net/careersection/ex/jobdetail.ftl?job=105823", "externalId" : "105823", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Irvine", "state" : "California", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "33.6856969,-117.8259810" } ], "locationText" : "Irvine, California, United States", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "remoteFriendly" : false, "rawDescription" : "Who We Are Through our service brands Hyundai Motor Finance, Genesis Finance, and Kia Finance, Hyundai Capital America offers a wide range of financial products tailored to meet the needs of Hyundai, Genesis, and Kia customers and dealerships. We provide vehicle financing, leasing, subscription, and insurance solutions to over 2 million consumers and businesses. Embodying our commitment to grow, innovate, and diversify, we strive to reimagine the customer and dealer experience and launch innovative new products that broaden our market reach. We believe that success comes from within and are proud to support our team members through skill development and career advancement. Hyundai Capital America is an Equal Opportunity Employer committed to creating a diverse and inclusive culture for our workforce. We are a values-driven company dedicated to supporting both internal and external communities through volunteering, philanthropy, and the empowerment of our Employee Resource Groups. Together, we strive to be the leader in financing freedom of movement. We Take Care of Our People Along with competitive pay, as an employee of HCA, you are eligible for the following benefits: · Medical, Dental and Vision plans that include no-cost and low-cost plan options · Immediate 401(k) matching and vesting · Vehicle purchase and lease discounts plus monthly vehicle allowances · Paid Volunteer Time Off with company donation to a charity of your choice · Tuition reimbursement What to Expect The Sr. Application Architect is responsible for ensuring delivery of solutions that meet data and architecture standards. This role works with technical and business teams to define and improve application architecture, data flows and controls between core systems, channels and external vendor applications for existing and new solutions. In addition, this role is responsible for the implementation and oversight of application data and integration monitoring. What You Will Do 1. Design and Architecture: · Support discovery and implementation of new enhancements including review/evaluation of requirements for data, architecture process controls including adherence to architecture standards, preliminary solutions, architecture design and service requirements approvals. · Actively consult throughout the execution phases, including design, engineering, migration, implementation and operations. 2. Performance and Optimization: · Lead the identification of application data and interface monitoring priorities and requirements, support design, development and validation of new reporting for existing processes and new enhancements. · Identify and capture definition of data, end to end system flow and application owner of data. · Provide oversight and monitor data flow between systems, channels and vendors, identify potential issues and work with technical and vendor teams on solutions to resolve data or integration discrepancies. · Lead process workshops collaborating with application teams to identify and recommend solutions for process gaps contributing to data or integration exceptions. 3. Technology Solutions: · Work collaboratively with application and business teams to set the technology direction, vision and strategy to enable technology solutions that will best suit their goals and objectives while maintaining data and architecture standards. · Maintain awareness of current automation solution offerings in the IT industry, allowing to make recommendations of future architecture. 4. Risk Management: · Analyze and capture current state data flows working with integration and application teams to identify data flow risks and opportunities. · Recommend best practice improvements. 5. Quality Assurance: · Work with Quality Management teams on strategies to improve enhancement testing and enhancement delivery quality to prevent production discrepancies and failures. What You Will Bring · Minimum 8 years’ experience in software development and architecture with object-oriented languages. · Knowledge of financial servicing, call center and integration applications (Cassiopae, Siebel CRM, Tibco preferred). · Automotive finance industry experience a plus. · Bachelor’s degree in Computer Science, Software Engineer, Information Technology or related field. · Experience with data migration and integration project implementations. · Advanced knowledge of application and system integration architecture, approaches, techniques, and technologies · Experience with auto finance business process and end to end account servicing lifecycle. · Ability to adapt in fast-paced environments with multiple priorities and minimal guidance. · Ability to proactively identify potential issues and provide recommended solutions · Strong problem solving and the ability to design innovative solutions. · Strong oral/written communication, able to convey complex technical concepts to non-technical peers and management. · Strong interpersonal skills, ability to build consensus and collaborate effectively with stakeholders. Work Environment Employees in this class are subject to extended periods of sitting, standing, and walking, vision to monitor and moderate noise levels. Work is performed in an at home and office environment. The posted salary range for this job takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; geographic location, and other business and organizational needs. Successful candidates may be hired anywhere in the salary range based on these factors. It is uncommon to hire candidates at or near the top of the range. California Privacy Notice This notice only applies to our applicants who reside in the State of California. The latest version of our Privacy Policy can be found here . This Privacy Policy provides you with notice, at or before the point of collection, about the categories of personal information to be collected from you, the purposes for which your personal information is collected or used, and whether that information is sold or shared, so that you can exercise meaningful control over our use of your personal information. We are providing this notice to comply with the California Consumer Privacy Act of 2018, as amended as amended by the California Privacy Rights Act of 2020 (“CCPA”). If you have any questions about CCPA regarding California residents or HCA team members, please contact the Privacy Team at Privacy2@hcs.com . United States-California-Irvine", "summaryDescription" : "Sr. Application Architect at Hyundai Capital America", "createdAt" : "2026-06-14T21:15:15.899", "lastUpdated" : "2026-06-15T22:58:24.729", "ingestTimestamp" : "2026-06-14T21:15:15.899", "mongoId" : "694ae6ce70f0b99d589b27fe", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 165000, "salaryAnnualMax" : 220000, "salaryBand" : "150k-200k", "hasSalary" : true, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 0.6666667, "_score" : 934.248, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "FinTech", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2cb20674d8ee00a09dee89", "title" : "Application Security Engineer", "industry" : "IT", "location" : "Germany", "locations" : [ "Germany" ], "certifications" : [ "OSCP", "OSWE" ], "timestamp" : "2026-06-15T11:28:44.533", "fingerprint" : "b7fa88866af0a0dac9ca92cb58e8f2d45740383fa8580be38ea2878876979db5", "source" : "lever", "applyUrl" : "https://jobs.lever.co/jobgether/a44d5f23-8e6d-4eea-b6ec-b9144ccec0a7/apply", "externalId" : "a44d5f23-8e6d-4eea-b6ec-b9144ccec0a7", "industryFunction" : { }, "structuredLocations" : [ { "country" : "Germany", "continent" : "eu", "workMode" : "onsite" } ], "locationText" : "Germany", "employmentType" : "FULL_TIME", "experienceMinYears" : 4, "experienceMaxYears" : 2, "experienceLevel" : "Junior", "technicalSkills" : "Python, Go, Java, JavaScript, SAML, OAuth, OIDC", "professionalSkills" : [ "Understanding of application security risks, including OWASP Top 10 and common web and system vulnerabilities. Solid understanding of authentication and authorization protocols such as SAML, OAuth, or OIDC. Exposure to cutting-edge technologies in cloud computing, AI platforms, and distributed systems." ], "hardSkillsList" : [ "OWASP Top 10" ], "softSkillsList" : [ "analytical thinking, problem-solving, attention to detail, collaboration, proactive mindset" ], "hardSkills" : [ { "name" : "OWASP Top 10", "level" : "intermediate" } ], "softSkills" : [ { "name" : "analytical thinking, problem-solving, attention to detail, collaboration, proactive mindset" } ], "majorSkills" : "Application Security, Secure Software Development, Threat Modeling", "majorSkillsList" : [ "Application Security, Secure Software Development, Threat Modeling" ], "coreResponsibilities" : "The Application Security Engineer will protect and strengthen large-scale cloud-native applications, working at the intersection of software engineering and cybersecurity. Responsibilities include identifying and remediating vulnerabilities using ASPM tools, integrating security into the SDLC, conducting penetration testing, and leading threat modeling sessions. The role also involves developing secure coding standards and serving as a subject matter expert to enhance the overall security posture of complex distributed systems.", "teamCollaboration" : "Collaborate closely with development teams and platform engineering teams to integrate security best practices throughout the software development lifecycle. Serve as a subject matter expert, providing guidance and support to internal teams across the organization. Work effectively in distributed and fast-paced environments.", "toolProficiency" : [ "Burp Suite, OWASP ZAP, Semgrep, ASPM tools" ], "communicationSkills" : "English fluency; technical communication", "documentationSkills" : "secure coding standards", "continuousLearning" : "Stay up to date with emerging security threats, vulnerabilities, attack techniques, and mitigation strategies. A proactive mindset and willingness to continuously learn and adapt to new security challenges.", "problemSolvingSkills" : "risk assessment", "specialRequirements" : "This position is listed on behalf of a partner company, who manages all applications and next steps.", "outcomesObjectives" : "Contribute to the continuous improvement of security engineering processes, automation, and tooling. Ensure applications are designed, built, and maintained with security at their core.", "qualificationsBasic" : "Minimum of 4 years of experience in application security, secure software development, or related cybersecurity engineering roles. Hands-on experience with secure coding practices in languages such as Python, Go, Java, or JavaScript. Proficiency in at least one programming language (e.g., Go or Python) with willingness to learn additional technologies. Practical experience with security testing tools such as Burp Suite, OWASP ZAP, Semgrep, or equivalent solutions. Experience conducting threat modeling exercises and security risk assessments. Analytical thinking and problem-solving skills with attention to detail in complex systems. Excellent communication skills in English, with the ability to explain technical security concepts to engineering teams. Ability to work independently while collaborating effectively in distributed and fast-paced environments. A proactive mindset and willingness to continuously learn and adapt to new security challenges.", "qualificationsPreferred" : "Security certifications such as OSCP or OSWE are considered a advantage. Experience with security automation, compliance translation, or exploitation of complex systems is a plus.", "remoteFriendly" : true, "workSiteFlexibility" : "Remote", "rawDescription" : "## Description This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for an Application Security Engineer based in Germany. Join a high-impact security engineering environment where you will play a key role in protecting and strengthening large-scale cloud-native applications that power next-generation AI infrastructure. In this role, you will work at the intersection of software engineering and cybersecurity, ensuring that applications are designed, built, and maintained with security at their core. You will collaborate closely with development teams to integrate security practices throughout the software development lifecycle, identify and remediate vulnerabilities, and improve the overall security posture of complex distributed systems. This position offers the opportunity to work with modern technologies, advanced cloud environments, and cutting-edge AI platforms while influencing how security is embedded into engineering practices at scale. It is ideal for a hands-on security professional who enjoys deep technical work, proactive risk identification, and cross-functional collaboration in a fast-paced engineering culture. ## Accountabilities Identify, analyze, and remediate application security vulnerabilities using modern application security posture management (ASPM) tools and related security technologies. Build, maintain, and enhance ASPM tools, rules, and automation to strengthen application security across engineering teams. Integrate security best practices into the software development lifecycle (SDLC) in close collaboration with development and platform engineering teams. Conduct manual and automated penetration testing to identify weaknesses in applications and supporting infrastructure. Lead threat modeling sessions and risk assessments for both new and existing applications to proactively address security risks. Develop, maintain, and promote secure coding standards and guidelines for engineering teams. Serve as a subject matter expert in application security, providing guidance and support to internal teams across the organization. Stay up to date with emerging security threats, vulnerabilities, attack techniques, and mitigation strategies. Contribute to the continuous improvement of security engineering processes, automation, and tooling. Requirements Minimum of 4 years of experience in application security, secure software development, or related cybersecurity engineering roles. Strong understanding of application security risks, including OWASP Top 10 and common web and system vulnerabilities. Hands-on experience with secure coding practices in languages such as Python, Go, Java, or JavaScript. Proficiency in at least one programming language (e.g., Go or Python) with willingness to learn additional technologies. Practical experience with security testing tools such as Burp Suite, OWASP ZAP, Semgrep, or equivalent solutions. Experience conducting threat modeling exercises and security risk assessments. Solid understanding of authentication and authorization protocols such as SAML, OAuth, or OIDC. Strong analytical thinking and problem-solving skills with attention to detail in complex systems. Excellent communication skills in English, with the ability to explain technical security concepts to engineering teams. Ability to work independently while collaborating effectively in distributed and fast-paced environments. A proactive mindset and willingness to continuously learn and adapt to new security challenges. Security certifications such as OSCP or OSWE are considered a strong advantage. Experience with security automation, compliance translation, or exploitation of complex systems is a plus. Benefits Competitive compensation package aligned with experience, skills, and location. Opportunity to work on large-scale, high-impact AI and cloud infrastructure projects. Flexible, remote-friendly working environment with strong autonomy and ownership. Career growth opportunities in a highly technical and fast-evolving security domain. Exposure to cutting-edge technologies in cloud computing, AI platforms, and distributed systems. Collaborative and innovative engineering culture focused on trust, learning, and impact. International environment working with highly skilled engineering and security teams. Inclusive workplace with equal opportunity policies and strong support for diversity. ## Additional Information How Jobgether works: We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team. We appreciate your interest and wish you the best! Why Apply Through Jobgether? Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time. #LI-CL1", "summaryDescription" : "Application Security Engineer. Skills: Application Security, Secure Software Development, Threat Modeling. The Application Security Engineer will protect and strengthen large-scale cloud-native applications, working at the intersection of software engineering and cybersecurity. Responsibilities include identifying and remediating vulnerabilities using ASPM tools, integrating security into the SDLC, conducting penetration testing, and leading threat modeling sessions. The role also involves devel", "postedDate" : "2026-06-12T04:23:12.884", "createdAt" : "2026-06-12T04:23:12.884", "lastUpdated" : "2026-06-15T11:28:44.533", "ingestTimestamp" : "2026-06-14T22:13:23.008", "mongoId" : "6a2cb20674d8ee00a09dee89", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "hasSalary" : false, "allSkills" : [ "OWASP Top 10", "analytical thinking, problem-solving, attention to detail, collaboration, proactive mindset", "Application Security, Secure Software Development, Threat Modeling", "Understanding of application security risks, including OWASP Top 10 and common web and system vulnerabilities. Solid understanding of authentication and authorization protocols such as SAML, OAuth, or OIDC. Exposure to cutting-edge technologies in cloud computing, AI platforms, and distributed systems.", "OSCP", "OSWE", "Burp Suite, OWASP ZAP, Semgrep, ASPM tools" ], "skillCount" : 7, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Mid", "dataQualityScore" : 0.7777778, "_score" : 933.4314, "daysOld" : 3, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.97 }, { "id" : "6a305303f292fd229cf10b5a", "title" : "Principal Cloud Architect", "company" : "Devoteam", "industry" : "Information Technology And Services", "salary" : { "min" : 1750000.0, "max" : 2500000.0, "currency" : "CZK", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market data for a Lead Principal Cloud Architect in Prague, Czech Republic, adjusted for the consulting industry and senior experience level." }, "location" : "Praha 1, Hlavní město Praha, CZ", "locations" : [ "Praha 1", "Hlavní město Praha", "CZ" ], "certifications" : [ "Google Professional Cloud Architect certification" ], "timestamp" : "2026-06-16T06:46:48.801", "fingerprint" : "cca797123f13d7bdb2a39c1029c6bb675ccbb3b2fb4cde3b0ab939c69160a87d", "source" : "smartrecruiters", "language" : "en", "applyUrl" : "https://jobs.smartrecruiters.com/Devoteam/744000132166792-principal-cloud-architect", "externalId" : "744000132166792", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Praha", "state" : "Hlavní město Praha", "country" : "Czech Republic", "continent" : "eu", "source" : "llm", "workMode" : "hybrid", "geo" : "50.1029026,14.3946353" } ], "locationText" : "Praha, Hlavní město Praha, Czech Republic", "employmentType" : "FULL_TIME", "minimumEducation" : "Bachelor's", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "mid", "technicalSkills" : "Google Cloud, AWS, Azure, Docker, Kubernetes, GKE, Terraform", "professionalSkills" : [ "Cloud strategy", "Solution design", "Technical leadership", "Presales activities" ], "hardSkillsList" : [ "Infrastructure engineering", "Cloud consulting", "CI/CD pipelines", "Infrastructure automation", "Compute", "Storage", "Networking", "Identity management", "VPC design", "Hybrid connectivity", "Security controls" ], "hardSkills" : [ { "name" : "Infrastructure engineering", "level" : "intermediate" }, { "name" : "Cloud consulting", "level" : "intermediate" }, { "name" : "CI/CD pipelines", "level" : "intermediate" }, { "name" : "Infrastructure automation", "level" : "intermediate" }, { "name" : "Compute", "level" : "intermediate" }, { "name" : "Storage", "level" : "intermediate" }, { "name" : "Networking", "level" : "intermediate" }, { "name" : "Identity management", "level" : "intermediate" }, { "name" : "VPC design", "level" : "intermediate" }, { "name" : "Hybrid connectivity", "level" : "intermediate" }, { "name" : "Security controls", "level" : "intermediate" } ], "majorSkills" : "Cloud architecture, Google Cloud, DevOps, Migrations", "majorSkillsList" : [ "Cloud architecture", "Google Cloud", "DevOps", "Migrations" ], "coreResponsibilities" : "Act as trusted technical advisor, Shape cloud strategies, Translate business requirements, Design Google Cloud solutions, Serve as Technical Lead, Provide hands-on expertise, Design end-to-end Google Cloud migrations, Own end-to-end Google Cloud architectures, Guide team members, Mentor team members, Serve as SME, Contribute knowledge, Manage presentations, Direct communication with clients, Bridge gap between customers and delivery teams, Provide technical leadership during presales, Provide technical leadership during workshops, Provide technical leadership during client presentations, Create detailed architecture documentation, Create solution designs, Ensure solutions meet security requirements, Ensure solutions meet compliance requirements, Ensure solutions meet availability requirements, Ensure solutions meet cost-optimization requirements", "teamCollaboration" : "Client communication; Delivery teams; Global practice", "domainKnowledge" : "Cloud infrastructure; Cloud networking; Enterprise workload migrations; Multi-cloud architectures; Hybrid architectures; Data warehouse migrations", "domainList" : [ "cloud-infrastructure", "cloud-networking", "enterprise-workload-migrations", "multi-cloud-architectures", "hybrid-architectures", "data-warehouse-migrations" ], "domainSpecificKnowledge" : [ "Cloud infrastructure", "Cloud networking", "Enterprise workload migrations", "Multi-cloud architectures", "Hybrid architectures", "Data warehouse migrations" ], "toolProficiency" : [ "Terraform" ], "communicationSkills" : "Present architecture solutions; Technical documentation", "documentationSkills" : "Architecture documentation; Solution designs", "continuousLearning" : "Training; Certifications; Udemy for business", "specialRequirements" : "Foreign business trips", "qualificationsBasic" : "5+ years of experience in cloud architecture, Experience designing solutions on Google Cloud, Experience leading enterprise workload migrations, Experience implementing DevOps practices, Understanding of cloud infrastructure, Experience with container technologies, Experience implementing Infrastructure-as-Code, Understanding of cloud networking, Excellent communication skills, Fluent English", "qualificationsPreferred" : "Google Professional Cloud Architect certification, Experience with multi-cloud architectures, Experience with hybrid architectures, Hands-on experience leading large data warehouse migrations, Hands-on experience leading infrastructure migrations", "remoteFriendly" : false, "workSiteFlexibility" : "Hybrid", "rawDescription" : "Tech native for over 30 years, Devoteam guides businesses through sustainable digital transformation to deliver value. With over 11,000 tech architects in more than 25 countries across Europe, the Middle East, and Africa, Devoteam is committed to using technology to serve people. Devoteam has been a ServiceNow Elite Partner since 2019. In 2026, it was recognised as ServiceNow Partner of the Year for the fourth consecutive year. At Devoteam, we deliver innovative technology consulting for leading organizations across Europe and beyond. As a Google Cloud Premier Partner, we support our clients in their digital transformation journeys by designing and implementing secure, scalable, and high-performance cloud solutions. We are expanding our Cloud & Data team and are looking for a Principal Cloud Architect to join us and lead the design of complex cloud architectures for enterprise clients across various industries. Your main duties and responsibilities: As a Principal cloud Architect you will act as a trusted technical advisor for our customers, shaping cloud strategies and translating business requirements into robust Google Cloud solutions. You will also serve as a Technical Lead for your fellow Cloud Architects and Cloud Engineers, providing hands-on expertise to team members and clients alike. Your responsibilities will include: * Design and own end-to-end Google Cloud migrations and architectures * Guide and mentor team members, serving as an SME and knowledge contributor to the wider global Google Cloud practice * Manage presentations and direct communication with clients, bridging the gap between customers and delivery teams * Provide technical leadership during presales activities, workshops, and client presentations. * Create detailed architecture documentation and solution designs. * Ensure solutions meet security, compliance, availability, and cost-optimization requirements. ## Qualifications Must be * Bachelor’s degree in Computer Science, Information Technology, or related field. * 5+ years of experience in cloud architecture, infrastructure engineering, or cloud consulting roles. * Strong experience designing solutions on Google Cloud, AWS, or Azure. * Experience leading enterprise workload migrations to public cloud environments. * Experience implementing DevOps practices including CI/CD pipelines and infrastructure automation. * Strong understanding of cloud infrastructure including compute, storage, networking, and identity management. * Experience with container technologies such as Docker and Kubernetes (GKE preferred). * Experience implementing Infrastructure-as-Code using Terraform or similar tools. * Strong understanding of cloud networking including VPC design, hybrid connectivity, and security controls. * Excellent communication skills and ability to present architecture solutions to technical and business stakeholders. * Fluent English. You will be a great fit for this role if you have… * Google Professional Cloud Architect certification, or equivalent * Experience with multi-cloud and hybrid architectures. * Hands-on experience leading large data warehouse and infrastructure migrations between on-prem and Cloud(s) ## Additional Information What will you get apart from the salary? * 5 weeks of vacation per year (= 1 week extra) * 4 My Days per year * Hybrid office * Flexible working hours * Career Management, training and certifications in the best breed of technologies - focused on technical skills (ServiceNow, Google), Project Management methodology etc., including Udemy for business account. * Meal allowance up to 28.000 CZK/year (123,90 CZK/day) * Cafeteria 1000 CZK/month (MultiSport Card available) * Phone tariff (unlimited calls, texts messages within the EU, 20GB of Internet) * Employee Referral Program * Sabbatical leave * Repurchase of hardware Moreover, we offer: * Foreign business trips * Above standard working equipment * Company Mobile Phone (selection from Android/iPhone) * Company Laptop (Windows/macOS) * Coffee, tea, snacks and breakfasts in the office * Company events and teambuildings * Gifts for work anniversaries, promotion or childbirth * Friendly and open culture And last but not least, you can rely on: * Transparent framework for career growth, reinforced by annual performance evaluations * Trust and autonomy, with no micro-management * Learning from senior colleagues and opportunities to collaborate with professionals from various industries * Opportunities to attend conferences to keep skills up-to-date * Working on a variety of projects for a broader range of experience * Adoption and utilization of evolving IT technologies", "summaryDescription" : "Principal Cloud Architect at Devoteam. Skills: Cloud architecture, Google Cloud, DevOps, Migrations. Act as trusted technical advisor. Shape cloud strategies", "postedDate" : "2026-06-15T10:54:19.000", "createdAt" : "2026-06-15T21:43:08.023", "lastUpdated" : "2026-06-16T06:46:48.801", "ingestTimestamp" : "2026-06-15T21:43:08.023", "mongoId" : "6a305303f292fd229cf10b5a", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "Infrastructure engineering", "Cloud consulting", "CI/CD pipelines", "Infrastructure automation", "Compute", "Storage", "Networking", "Identity management", "VPC design", "Hybrid connectivity", "Security controls", "Cloud architecture", "Google Cloud", "DevOps", "Migrations", "Cloud strategy", "Solution design", "Technical leadership", "Presales activities", "Cloud infrastructure", "Cloud networking", "Enterprise workload migrations", "Multi-cloud architectures", "Hybrid architectures", "Data warehouse migrations", "Google Professional Cloud Architect certification", "Terraform" ], "skillCount" : 27, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Lead", "dataQualityScore" : 1.0, "_score" : 928.26, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Consulting", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2a7e3f74d8ee00a06688d7", "title" : "Principal Security Engineer", "company" : "Candid Health", "industry" : "Engineering", "salary" : { "min" : 240000.0, "max" : 310000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "San Francisco (CA), Denver (CO), New York (NY)", "locations" : [ "San Francisco (CA), Denver (CO), New York (NY)" ], "timestamp" : "2026-06-13T21:34:20.124", "fingerprint" : "906e863aa56031863015fae16616569e857cba208bddf069f2558fc76c2b513b", "source" : "ashby", "language" : "en", "applyUrl" : "https://jobs.ashbyhq.com/candidhealth/a916ce1b-a86b-49d8-ab44-21beab4d502c/application", "externalId" : "a916ce1b-a86b-49d8-ab44-21beab4d502c", "industryFunction" : { }, "structuredLocations" : [ { "city" : "San Francisco", "state" : "California", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "37.7879363,-122.4075201" }, { "city" : "Denver", "state" : "Colorado", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "39.7392364,-104.9848620" }, { "city" : "New York", "state" : "New York", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "40.7127281,-74.0060152" } ], "locationText" : "San Francisco, California, United States; Denver, Colorado, United States; New York, New York, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 10, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "Security engineering, Infrastructure-as-code", "professionalSkills" : [ "System design", "Risk assessment", "Vendor management" ], "hardSkillsList" : [ "Threat modeling", "Secure coding practices", "Penetration testing" ], "softSkillsList" : [ "Leadership", "Mentoring" ], "hardSkills" : [ { "name" : "Threat modeling", "level" : "intermediate" }, { "name" : "Secure coding practices", "level" : "intermediate" }, { "name" : "Penetration testing", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" }, { "name" : "Mentoring" } ], "majorSkills" : "Security architecture, Enterprise security, Healthcare data security", "majorSkillsList" : [ "Security architecture", "Enterprise security", "Healthcare data security" ], "coreResponsibilities" : "Architect security landscape, Guide security landscape, Set technical bar, Mentor engineers, Scale security culture, Design enterprise roadmap, Lead technical transition, Drive strategy at leadership level, Translate technical risks, Stack-rank risks, Embed security into business strategy, Translate frameworks into requirements, Ensure compliance is automated, Serve as technical voice, Evangelize secure-by-design culture, Level up employees, Embed security mindset, Oversee penetration testing, Dissect vendor architectures, Ensure continuous scrutiny", "teamCollaboration" : "Partner with Engineering leadership; Partner with Product leadership; Cross-functional collaboration", "projectManagementSkills" : [ "Roadmap planning" ], "domainKnowledge" : "Healthcare data workflows; Protected critical information; HIPAA; SOC2; SOC1; PCI; HITRUST", "domainList" : [ "healthcare-data-workflows", "protected-critical-information", "hipaa", "soc2", "soc1", "pci", "hitrust" ], "domainSpecificKnowledge" : [ "Healthcare data workflows", "Protected critical information", "HIPAA", "SOC2", "SOC1", "PCI", "HITRUST" ], "communicationSkills" : "Technical risk communication", "problemSolvingSkills" : "Root cause analysis", "qualificationsBasic" : "10+ years of experience in security engineering, Proven track record of architecting secure systems, Experience in startup environments, Experience in scaled enterprise environments", "qualificationsPreferred" : "Experience with HIPAA, Experience with SOC2, Experience with SOC1, Experience with PCI, Experience with HITRUST", "workSiteFlexibility" : "Flexible", "rawDescription" : "THE ROLE You will be the foundational technical pillar for security at Candid Health. As our first Principal Security Engineer, you won't just be managing a compliance checklist—you will architect, build, and scale the technical systems that protect our customers and their patients. Operating as a high-influence individual contributor, you will partner directly with Engineering and Product leadership to ensure we ship features rapidly while maintaining an ironclad promise of data integrity. This is a role for a heavy-hitting technical leader who wants to set the security blueprint for a fast-growing health-tech platform. WHAT YOU’LL DO - Architect and Guide the Security Landscape: Serve as the ultimate technical authority for security at Candid. While you won’t be managing HR lines, you will set the technical bar, mentor engineers, and help scale a world-class security engineering culture. - Design the Enterprise-Grade Roadmap: Lead the technical transition from a foundational security posture to a best-in-class, resilient enterprise architecture capable of defending complex healthcare data workflows. - Drive Strategy at the Leadership Level: Act as the subject matter expert who translates complex technical risks into business priorities. You will partner with executive leadership to stack-rank risks and embed security directly into Candid’s overarching business strategy. - Bake Trust & Compliance into the Architecture: Translate rigorous frameworks like HIPAA, SOC2, SOC1, PCI, and HITRUST into concrete engineering requirements. You will ensure compliance is a living, automated process built into our code and infra, and you'll regularly serve as the expert technical voice in the room with our largest enterprise customers. - Evangelize a \"Secure-by-Design\" Culture: Level up our 200+ employees. Through threat modeling, secure coding practices, and cross-functional collaboration, you will embed a security-first mindset across every team from engineering to legal. - Own Vulnerability & Vendor Deep Dives: Oversee third-party penetration testing, dissect vendor architectures before integration, and ensure our production environments undergo continuous automated and manual scrutiny. WHO YOU ARE - An Elite Technical Leader: You have 10+ years of experience in security engineering, with a proven track record of architecting secure systems across complex technical surface areas in both startup and scaled enterprise environments. - A Practitioner, Not Just a Theorist: You have driven security outcomes at scale. You know how to balance pragmatism with bulletproof defense-in-depth, and you excel at navigating the technical trade-offs required in a fast-moving engineering organization. - A Security Expert: You possess a deep, native understanding of sensitive, highly regulated datasets and the unique, high-stakes challenges of handling protected critical information - A Force Multiplier: You know how to code, architect, and influence. You are equally comfortable writing secure infrastructure-as-code, threat-modeling a distributed system, or standing in front of an enterprise customer's CISO to defend Candid's security posture. Our values We spend at least as much time with our coworkers as we do with our closest friends + family - if we intend to do the most important + challenging work of our lives, it’s important that these folks energize us, support us, inspire us, and push us to do our best work. This is what you can expect of your teammates at Candid (in no particular order): - We put our customers first - We take care of each other and ourselves - We anchor on outcomes and work relentlessly and creatively to achieve them - We collectively prioritize building a diverse and inclusive workspace - We believe humility is our greatest strength - We are candid, kind, and committed - We strive to be the most prepared person in the room - We are truth seekers Pay Transparency The estimated starting annual salary range for this position is $240,000 - $310,000 USD. The listed range is a guideline from Pave https://www.pave.com/ data, and the actual base salary may be modified based on factors including job-related skills, experience/qualifications, interview performance, market data, etc. Total compensation for this position may also include equity, sales incentives (for sales roles), and employee benefits. Given Candid Health’s funding and size, we heavily value the potential upside from equity in our compensation package. Further note that Candid Health has minimal hierarchy and titles, but has broad ranges of experience represented within roles.", "summaryDescription" : "Principal Security Engineer at Candid Health. Skills: Security architecture, Enterprise security, Healthcare data security. Architect security landscape. Guide security landscape", "postedDate" : "2026-06-11T20:50:04.035", "createdAt" : "2026-06-11T20:50:04.035", "lastUpdated" : "2026-06-13T21:34:20.124", "ingestTimestamp" : "2026-06-11T20:50:04.035", "mongoId" : "6a2a7e3f74d8ee00a06688d7", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 240000, "salaryAnnualMax" : 310000, "salaryBand" : "200k+", "hasSalary" : true, "allSkills" : [ "Threat modeling", "Secure coding practices", "Penetration testing", "Leadership", "Mentoring", "Security architecture", "Enterprise security", "Healthcare data security", "System design", "Risk assessment", "Vendor management", "Roadmap planning", "Healthcare data workflows", "Protected critical information", "HIPAA", "SOC2", "SOC1", "PCI", "HITRUST" ], "skillCount" : 19, "jobCategory" : "engineering", "jobSubcategory" : "engineering", "dataQualityScore" : 1.0, "_score" : 925.1711, "daysOld" : 2, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Healthcare" }, { "id" : "6a306771f292fd229cfbd52b", "title" : "Senior Application Security Engineer (AI & Vulnerability)", "company" : "Samsara", "industry" : "Technology", "salary" : { "min" : 95000.0, "max" : 140000.0, "currency" : "GBP", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for Senior Application Security Engineer in the UK technology sector, adjusted for seniority and remote work." }, "location" : "Remote - UK", "locations" : [ "Remote - UK" ], "timestamp" : "2026-06-16T09:08:56.317", "fingerprint" : "fe09f569010875aff1d1c0411c11365f0ad8534e59834ec6e29f2a20b6143bb6", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://www.samsara.com/company/careers/roles/7857926?gh_jid=7857926", "externalId" : "7857926", "industryFunction" : { }, "structuredLocations" : [ { "country" : "United Kingdom", "continent" : "eu", "workMode" : "remote" } ], "locationText" : "United Kingdom", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "remoteFriendly" : true, "workSiteFlexibility" : "Remote", "rawDescription" : "Who we are Samsara (NYSE: IOT) is the pioneer of the Connected Operations™ Cloud, which is a platform that enables organizations that depend on physical operations to harness Internet of Things (IoT) data to develop actionable insights and improve their operations. At Samsara, we are helping improve the safety, efficiency and sustainability of the physical operations that power our global economy. Representing more than 40% of global GDP, these industries are the infrastructure of our planet, including agriculture, construction, field services, transportation, and manufacturing — and we are excited to help digitally transform their operations at scale. Working at Samsara means you’ll help define the future of physical operations and be on a team that’s shaping an exciting array of product solutions, including Video-Based Safety, Vehicle Telematics, Apps and Driver Workflows, and Equipment Monitoring. As part of a recently public company, you’ll have the autonomy and support to make an impact as we build for the long term. About the role: We’re seeking a talented Senior Application/Product Security Engineer with hands-on experience deploying, managing, and operating modern Vulnerability Management platforms. In this role, you’ll work alongside technical product managers and engineers across the company to maintain Samsara’s Vulnerability Management infrastructure and de-risk software vulnerabilities to better protect our customers. We seek someone who is passionate about leveraging automation to enhance efficiency, is enthusiastic about working with infrastructure-as-code, and has a wealth of experience collaborating with teams to reduce software vulnerabilities. Your contributions will be critical to shaping our overall security and compliance strategy. At Samsara, we value working backwards from winning as an operating principle. Your ability to define success and work with cross-functional stakeholders by working backwards to reach that success is pivotal. You should apply if: You want to impact the industries that run our world: Your efforts will result in real-world impact—helping to keep the lights on, get food into grocery stores, reduce emissions, and most importantly, ensure workers return home safely. You are the architect of your own career: If you put in the work, this role won’t be your last at Samsara. We set up our employees for success and have built a culture that encourages rapid career development, and countless opportunities to experiment and master your craft in a hyper-growth environment. You’re energized by our opportunity: The vision we have to digitize large sectors of the global economy requires your full focus and best efforts to bring forth creative, ambitious ideas for our customers. You want to be with the best: At Samsara, we win together, celebrate together and support each other. You will be surrounded by a high-caliber team that will encourage you to do your best. In this role, you will: Lead and own ongoing operation and maintenance of Samsara’s vulnerability management program, ensuring consistent execution of processes. Assist in managing vulnerability scanning tools and help refine detection capabilities to improve accuracy and reduce false positives. Work closely with the Vulnerability Technical Program Manager to generate and distribute monthly and quarterly compliance reports. Collaborate with engineering teams to track and support the remediation of identified vulnerabilities, providing guidance on best practices. Assist in analyzing and triaging vulnerabilities, escalating critical issues to senior security engineers or Security Operations as needed. Participate in security incident investigations related to high-profile vulnerabilities, helping gather data and assess potential impact on Samsara infrastructure. Contribute to documentation and process improvements to streamline vulnerability management workflows. Champion Samsara’s cultural principles (Focus on Customer Success, Build for the Long Term, Adopt a Growth Mindset, Be Inclusive, Win as a Team) in daily work. Be regularly on call to support Minimum requirements for the role: 6+ years of relevant experience with demonstrated impact for security engineering and vulnerability management in an enterprise environment. Significant experience with vulnerability management tooling, in particular modern toolsets such as Wiz, or Semgrep. Deep subject matter expertise with security engineering best practices for subjects such as CVSS, EPSS. Strong familiarity with common security vulnerabilities and the ability to judge their severity and impact on the business. Excellent development background with experience in Python or GoLang. Strong DevOps, DevSecOps, or SRE background with experience in AWS cloud services, and Terraform Experience using security automation platforms such as Tines and serverless frameworks such as AWS Lambda. Deep understanding of Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), or Software Composition Analysis (SCA) An ideal candidate also has: Practical experience managing vulnerabilities within a FedRAMP-certified environment. Experience integrating vulnerability management into modern CI/CD pipelines with a “shift-left” mentality. Total Rewards At Samsara, we build for the people who keep the global economy moving. We want owners, not passengers, which is why our rewards are designed to fuel high-impact builders. Our compensation program delivers above-market total compensation through a combination of base salary, performance-based bonus/variable pay, and equity (for eligible roles) in a high-growth public company. We meaningfully differentiate pay for our top performers, who have the opportunity to earn above-market compensation that can outpace the broader market over time. Beyond compensation, we provide the foundations that enable long-term success: a flexible, employee-led remote model, a professional development stipend, comprehensive health and parental leave plans, and more. If you’re ready to build for the long term and own the outcome, your journey starts here. Flexible Working At Samsara, we embrace a flexible working model that caters to the diverse needs of our teams. Our offices are open for those who prefer to work in-person and we also support remote work where it aligns with our operational requirements. For certain positions, being close to one of our offices or within a specific geographic area is important to facilitate collaboration, access to resources, or alignment with our service regions. In these cases, the job description will clearly indicate any working location requirements. Our goal is to ensure that all members of our team can contribute effectively, whether they are working on-site, in a hybrid model, or fully remotely. All offers of employment are contingent upon an individual’s ability to secure and maintain the legal right to work at the company and in the specified work location, if applicable. Belonging at Samsara At Samsara, we welcome everyone regardless of their background. All qualified applicants will receive consideration for employment without regard to race, color, religion, national origin, sex, gender, gender identity, sexual orientation, protected veteran status, disability, age, and other characteristics protected by law. We depend on the unique approaches of our team members to help us solve complex problems and want to ensure that Samsara is a place where people from all backgrounds can make an impact. Accommodations Samsara is an inclusive work environment, and we are committed to ensuring equal opportunity in employment for qualified persons with disabilities. Please email accessibleinterviewing@samsara.com or click here if you require any reasonable accommodations throughout the recruiting process. Our Commitment to Authenticity We use Tofu, a fraud detection tool, to validate the authenticity of applications and protect against identity fraud. This ensures we are connecting with real people and allows us to prioritize genuine candidates. Please see Samsara’s Candidate Privacy Notice for more information. Fraudulent Employment Offers Samsara is aware of scams involving fake job interviews and offers. Please know we do not charge fees to applicants at any stage of the hiring process. Official communication about your application will only come from emails ending in @samsara.com, @us-greenhouse-mail.io or @mail3.guide.co. For more information regarding fraudulent employment offers, please visit our blog post here.", "summaryDescription" : "Senior Application Security Engineer (AI & Vulnerability) at Samsara", "postedDate" : "2026-06-15T23:28:30.117", "createdAt" : "2026-06-15T23:28:30.117", "lastUpdated" : "2026-06-16T09:08:56.317", "ingestTimestamp" : "2026-06-15T23:28:30.117", "mongoId" : "6a306771f292fd229cfbd52b", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "75k-100k", "hasSalary" : false, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 0.7777778, "_score" : 924.2462, "daysOld" : 0, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.98 }, { "id" : "6a30550bf292fd229cf1d871", "title" : "Principal Cloud Architect", "company" : "Devoteam", "industry" : "Information Technology And Services", "salary" : { "min" : 1700000.0, "max" : 2500000.0, "currency" : "CZK", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market data for a Lead Principal Cloud Architect in Prague, Czech Republic, adjusted for the consulting industry and senior experience level." }, "location" : "Praha 1, Hlavní město Praha, CZ", "locations" : [ "Praha 1", "Hlavní město Praha", "CZ" ], "certifications" : [ "Google Professional Cloud Architect certification" ], "timestamp" : "2026-06-16T07:41:39.255", "fingerprint" : "c4c1c5bf944aa7f3bd2510f2f93486e1994031bffffddbed00126e8bd4635eb1", "source" : "smartrecruiters", "language" : "en", "applyUrl" : "https://jobs.smartrecruiters.com/Devoteam/744000132166792-principal-cloud-architect", "externalId" : "744000132166792", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Praha", "state" : "Hlavní město Praha", "country" : "Czech Republic", "continent" : "eu", "source" : "llm", "workMode" : "hybrid", "geo" : "50.1029026,14.3946353" } ], "locationText" : "Praha, Hlavní město Praha, Czech Republic", "employmentType" : "FULL_TIME", "minimumEducation" : "Bachelor's", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "mid", "technicalSkills" : "Google Cloud, AWS, Azure, Docker, Kubernetes, GKE, Terraform", "professionalSkills" : [ "Cloud strategy", "Solution design", "Technical leadership", "Presales activities" ], "hardSkillsList" : [ "Infrastructure engineering", "Cloud consulting", "CI/CD pipelines", "Infrastructure automation", "Compute", "Storage", "Networking", "Identity management", "VPC design", "Hybrid connectivity", "Security controls" ], "hardSkills" : [ { "name" : "Infrastructure engineering", "level" : "intermediate" }, { "name" : "Cloud consulting", "level" : "intermediate" }, { "name" : "CI/CD pipelines", "level" : "intermediate" }, { "name" : "Infrastructure automation", "level" : "intermediate" }, { "name" : "Compute", "level" : "intermediate" }, { "name" : "Storage", "level" : "intermediate" }, { "name" : "Networking", "level" : "intermediate" }, { "name" : "Identity management", "level" : "intermediate" }, { "name" : "VPC design", "level" : "intermediate" }, { "name" : "Hybrid connectivity", "level" : "intermediate" }, { "name" : "Security controls", "level" : "intermediate" } ], "majorSkills" : "Cloud architecture, Google Cloud, DevOps practices, Container technologies", "majorSkillsList" : [ "Cloud architecture", "Google Cloud", "DevOps practices", "Container technologies" ], "coreResponsibilities" : "Design end-to-end Google Cloud migrations, Own end-to-end Google Cloud architectures, Guide team members, Mentor team members, Serve as SME, Contribute knowledge, Manage presentations, Direct communication with clients, Provide technical leadership, Create architecture documentation, Create solution designs, Ensure solutions meet security requirements, Ensure solutions meet compliance requirements, Ensure solutions meet availability requirements, Ensure solutions meet cost-optimization requirements", "teamCollaboration" : "Technical Lead for Cloud Architects; Technical Lead for Cloud Engineers; Bridging gap between customers; Bridging gap between delivery teams", "domainKnowledge" : "Cloud infrastructure; Cloud networking; Data warehouse migrations", "domainList" : [ "cloud-infrastructure", "cloud-networking", "data-warehouse-migrations" ], "domainSpecificKnowledge" : [ "Cloud infrastructure", "Cloud networking", "Data warehouse migrations" ], "toolProficiency" : [ "Terraform" ], "communicationSkills" : "Present architecture solutions; Technical documentation", "documentationSkills" : "Architecture documentation; Solution designs", "continuousLearning" : "Career Management; Training; Certifications; Udemy for business account", "specialRequirements" : "Foreign business trips", "qualificationsBasic" : "5+ years of experience in cloud architecture, Experience designing solutions on Google Cloud, Experience leading enterprise workload migrations, Experience implementing DevOps practices, Understanding of cloud infrastructure, Experience with container technologies, Experience implementing Infrastructure-as-Code, Understanding of cloud networking, Excellent communication skills, Fluent English", "qualificationsPreferred" : "Google Professional Cloud Architect certification, Experience with multi-cloud architectures, Experience with hybrid architectures, Hands-on experience leading large data warehouse migrations, Hands-on experience leading infrastructure migrations", "remoteFriendly" : false, "workSiteFlexibility" : "Hybrid", "rawDescription" : "Tech native for over 30 years, Devoteam guides businesses through sustainable digital transformation to deliver value. With over 11,000 tech architects in more than 25 countries across Europe, the Middle East, and Africa, Devoteam is committed to using technology to serve people. Devoteam has been a ServiceNow Elite Partner since 2019. In 2026, it was recognised as ServiceNow Partner of the Year for the fourth consecutive year. At Devoteam, we deliver innovative technology consulting for leading organizations across Europe and beyond. As a Google Cloud Premier Partner, we support our clients in their digital transformation journeys by designing and implementing secure, scalable, and high-performance cloud solutions. We are expanding our Cloud & Data team and are looking for a Principal Cloud Architect to join us and lead the design of complex cloud architectures for enterprise clients across various industries. Your main duties and responsibilities: As a Principal cloud Architect you will act as a trusted technical advisor for our customers, shaping cloud strategies and translating business requirements into robust Google Cloud solutions. You will also serve as a Technical Lead for your fellow Cloud Architects and Cloud Engineers, providing hands-on expertise to team members and clients alike. Your responsibilities will include: * Design and own end-to-end Google Cloud migrations and architectures * Guide and mentor team members, serving as an SME and knowledge contributor to the wider global Google Cloud practice * Manage presentations and direct communication with clients, bridging the gap between customers and delivery teams * Provide technical leadership during presales activities, workshops, and client presentations. * Create detailed architecture documentation and solution designs. * Ensure solutions meet security, compliance, availability, and cost-optimization requirements. ## Qualifications Must be * Bachelor’s degree in Computer Science, Information Technology, or related field. * 5+ years of experience in cloud architecture, infrastructure engineering, or cloud consulting roles. * Strong experience designing solutions on Google Cloud, AWS, or Azure. * Experience leading enterprise workload migrations to public cloud environments. * Experience implementing DevOps practices including CI/CD pipelines and infrastructure automation. * Strong understanding of cloud infrastructure including compute, storage, networking, and identity management. * Experience with container technologies such as Docker and Kubernetes (GKE preferred). * Experience implementing Infrastructure-as-Code using Terraform or similar tools. * Strong understanding of cloud networking including VPC design, hybrid connectivity, and security controls. * Excellent communication skills and ability to present architecture solutions to technical and business stakeholders. * Fluent English. You will be a great fit for this role if you have… * Google Professional Cloud Architect certification, or equivalent * Experience with multi-cloud and hybrid architectures. * Hands-on experience leading large data warehouse and infrastructure migrations between on-prem and Cloud(s) ## Additional Information What will you get apart from the salary? * 5 weeks of vacation per year (= 1 week extra) * 4 My Days per year * Hybrid office * Flexible working hours * Career Management, training and certifications in the best breed of technologies - focused on technical skills (ServiceNow, Google), Project Management methodology etc., including Udemy for business account. * Meal allowance up to 28.000 CZK/year (123,90 CZK/day) * Cafeteria 1000 CZK/month (MultiSport Card available) * Phone tariff (unlimited calls, texts messages within the EU, 20GB of Internet) * Employee Referral Program * Sabbatical leave * Repurchase of hardware Moreover, we offer: * Foreign business trips * Above standard working equipment * Company Mobile Phone (selection from Android/iPhone) * Company Laptop (Windows/macOS) * Coffee, tea, snacks and breakfasts in the office * Company events and teambuildings * Gifts for work anniversaries, promotion or childbirth * Friendly and open culture And last but not least, you can rely on: * Transparent framework for career growth, reinforced by annual performance evaluations * Trust and autonomy, with no micro-management * Learning from senior colleagues and opportunities to collaborate with professionals from various industries * Opportunities to attend conferences to keep skills up-to-date * Working on a variety of projects for a broader range of experience * Adoption and utilization of evolving IT technologies", "summaryDescription" : "Principal Cloud Architect at Devoteam. Skills: Cloud architecture, Google Cloud, DevOps practices, Container technologies. Design end-to-end Google Cloud migrations. Own end-to-end Google Cloud architectures", "postedDate" : "2026-06-15T10:54:19.000", "createdAt" : "2026-06-15T23:38:37.056", "lastUpdated" : "2026-06-16T07:41:39.255", "ingestTimestamp" : "2026-06-15T23:38:37.056", "mongoId" : "6a30550bf292fd229cf1d871", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "Infrastructure engineering", "Cloud consulting", "CI/CD pipelines", "Infrastructure automation", "Compute", "Storage", "Networking", "Identity management", "VPC design", "Hybrid connectivity", "Security controls", "Cloud architecture", "Google Cloud", "DevOps practices", "Container technologies", "Cloud strategy", "Solution design", "Technical leadership", "Presales activities", "Cloud infrastructure", "Cloud networking", "Data warehouse migrations", "Google Professional Cloud Architect certification", "Terraform" ], "skillCount" : 24, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Lead", "dataQualityScore" : 1.0, "_score" : 920.1512, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Consulting", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2cb20674d8ee00a09dee88", "title" : "Application Security Engineer", "industry" : "IT", "salary" : { "min" : 55000.0, "max" : 80000.0, "currency" : "EUR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Mid-level Application Security Engineer in France, adjusted for the technology industry and a mid-sized company." }, "location" : "France", "locations" : [ "France" ], "certifications" : [ "OSCP", "OSWE" ], "timestamp" : "2026-06-15T23:03:24.564", "fingerprint" : "ff29a523637da87f39ff9a3cbd2982fbffe59fb03d58f2872597f6608556b6c2", "source" : "lever", "language" : "en", "applyUrl" : "https://jobs.lever.co/jobgether/7619e630-47fc-4e6e-99dc-5ed46d0c2ca9/apply", "externalId" : "7619e630-47fc-4e6e-99dc-5ed46d0c2ca9", "industryFunction" : { }, "structuredLocations" : [ { "country" : "France", "continent" : "eu", "workMode" : "onsite" } ], "locationText" : "France", "employmentType" : "FULL_TIME", "experienceMinYears" : 4, "experienceMaxYears" : 5, "experienceLevel" : "Mid", "technicalSkills" : "Python, Go, Java, JavaScript, Burp Suite, OWASP ZAP, Semgrep", "professionalSkills" : [ "Risk assessment", "Secure coding" ], "hardSkillsList" : [ "Application security", "Secure software development", "Cybersecurity engineering", "Penetration testing", "Threat modeling", "Risk assessments", "Secure coding standards", "Authentication protocols", "Authorization protocols", "SAML", "OAuth", "OIDC" ], "softSkillsList" : [ "Problem-solving" ], "hardSkills" : [ { "name" : "Application security", "level" : "intermediate" }, { "name" : "Secure software development", "level" : "intermediate" }, { "name" : "Cybersecurity engineering", "level" : "intermediate" }, { "name" : "Penetration testing", "level" : "intermediate" }, { "name" : "Threat modeling", "level" : "intermediate" }, { "name" : "Risk assessments", "level" : "intermediate" }, { "name" : "Secure coding standards", "level" : "intermediate" }, { "name" : "Authentication protocols", "level" : "intermediate" }, { "name" : "Authorization protocols", "level" : "intermediate" }, { "name" : "SAML", "level" : "intermediate" }, { "name" : "OAuth", "level" : "intermediate" }, { "name" : "OIDC", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Problem-solving" } ], "majorSkills" : "Application security, Secure coding, Threat modeling", "majorSkillsList" : [ "Application security", "Secure coding", "Threat modeling" ], "coreResponsibilities" : "Identify application security vulnerabilities, Analyze application security vulnerabilities, Remediate application security vulnerabilities, Build ASPM tools, Maintain ASPM tools, Enhance ASPM tools, Integrate security best practices, Conduct manual penetration testing, Conduct automated penetration testing, Lead threat modeling sessions, Lead risk assessments, Develop secure coding standards, Maintain secure coding standards, Promote secure coding standards, Serve as a subject matter expert, Provide guidance to internal teams, Provide support to internal teams, Stay up to date with threats, Stay up to date with vulnerabilities, Stay up to date with attack techniques, Stay up to date with mitigation strategies, Contribute to continuous improvement, Improve security engineering processes, Improve security automation, Improve security tooling", "teamCollaboration" : "Collaboration with development teams; Collaboration with platform engineering teams; Collaboration in distributed environments", "domainKnowledge" : "Application security posture management; OWASP Top 10; Web vulnerabilities; System vulnerabilities; Authentication protocols; Authorization protocols; Cloud computing; AI platforms; Distributed systems", "domainList" : [ "application-security-posture-management", "owasp-top-10", "web-vulnerabilities", "system-vulnerabilities", "authentication-protocols", "authorization-protocols", "cloud-computing", "ai-platforms", "distributed-systems" ], "domainSpecificKnowledge" : [ "Application security posture management", "OWASP Top 10", "Web vulnerabilities", "System vulnerabilities", "Authentication protocols", "Authorization protocols", "Cloud computing", "AI platforms", "Distributed systems" ], "toolProficiency" : [ "ASPM tools", "Burp Suite", "OWASP ZAP", "Semgrep" ], "communicationSkills" : "Explain technical concepts", "continuousLearning" : "Willingness to learn additional technologies; Willingness to continuously learn", "problemSolvingSkills" : "Analytical thinking; Problem-solving", "qualificationsBasic" : "4 years of experience in application security, Understanding of application security risks, Hands-on experience with secure coding practices, Proficiency in at least one programming language, Practical experience with security testing tools, Experience conducting threat modeling exercises, Solid understanding of authentication and authorization protocols, Analytical thinking and problem-solving skills, Excellent communication skills in English, Ability to work independently, Ability to collaborate effectively, A proactive mindset, Willingness to continuously learn", "qualificationsPreferred" : "Security certifications such as OSCP, Security certifications such as OSWE, Experience with security automation, Experience with compliance translation, Experience with exploitation of complex systems", "remoteFriendly" : true, "workSiteFlexibility" : "Remote", "rawDescription" : "## Accountabilities Identify, analyze, and remediate application security vulnerabilities using modern application security posture management (ASPM) tools and related security technologies. Build, maintain, and enhance ASPM tools, rules, and automation to strengthen application security across engineering teams. Integrate security best practices into the software development lifecycle (SDLC) in close collaboration with development and platform engineering teams. Conduct manual and automated penetration testing to identify weaknesses in applications and supporting infrastructure. Lead threat modeling sessions and risk assessments for both new and existing applications to proactively address security risks. Develop, maintain, and promote secure coding standards and guidelines for engineering teams. Serve as a subject matter expert in application security, providing guidance and support to internal teams across the organization. Stay up to date with emerging security threats, vulnerabilities, attack techniques, and mitigation strategies. Contribute to the continuous improvement of security engineering processes, automation, and tooling. Requirements Minimum of 4 years of experience in application security, secure software development, or related cybersecurity engineering roles. Strong understanding of application security risks, including OWASP Top 10 and common web and system vulnerabilities. Hands-on experience with secure coding practices in languages such as Python, Go, Java, or JavaScript. Proficiency in at least one programming language (e.g., Go or Python) with willingness to learn additional technologies. Practical experience with security testing tools such as Burp Suite, OWASP ZAP, Semgrep, or equivalent solutions. Experience conducting threat modeling exercises and security risk assessments. Solid understanding of authentication and authorization protocols such as SAML, OAuth, or OIDC. Strong analytical thinking and problem-solving skills with attention to detail in complex systems. Excellent communication skills in English, with the ability to explain technical security concepts to engineering teams. Ability to work independently while collaborating effectively in distributed and fast-paced environments. A proactive mindset and willingness to continuously learn and adapt to new security challenges. Security certifications such as OSCP or OSWE are considered a strong advantage. Experience with security automation, compliance translation, or exploitation of complex systems is a plus. Benefits Competitive compensation package aligned with experience, skills, and location. Opportunity to work on large-scale, high-impact AI and cloud infrastructure projects. Flexible, remote-friendly working environment with strong autonomy and ownership. Career growth opportunities in a highly technical and fast-evolving security domain. Exposure to cutting-edge technologies in cloud computing, AI platforms, and distributed systems. Collaborative and innovative engineering culture focused on trust, learning, and impact. International environment working with highly skilled engineering and security teams. Inclusive workplace with equal opportunity policies and strong support for diversity. ## Additional Information How Jobgether works: We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team. We appreciate your interest and wish you the best! Why Apply Through Jobgether? Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time. #LI-CL1", "summaryDescription" : "Application Security Engineer. Skills: Application security, Secure coding, Threat modeling. Identify application security vulnerabilities. Analyze application security vulnerabilities", "postedDate" : "2026-06-12T04:49:58.173", "createdAt" : "2026-06-12T04:49:58.173", "lastUpdated" : "2026-06-15T23:03:24.564", "ingestTimestamp" : "2026-06-14T22:11:23.998", "mongoId" : "6a2cb20674d8ee00a09dee88", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "50k-75k", "hasSalary" : false, "allSkills" : [ "Application security", "Secure software development", "Cybersecurity engineering", "Penetration testing", "Threat modeling", "Risk assessments", "Secure coding standards", "Authentication protocols", "Authorization protocols", "SAML", "OAuth", "OIDC", "Problem-solving", "Secure coding", "Risk assessment", "Application security posture management", "OWASP Top 10", "Web vulnerabilities", "System vulnerabilities", "Cloud computing", "AI platforms", "Distributed systems", "OSCP", "OSWE", "ASPM tools", "Burp Suite", "OWASP ZAP", "Semgrep" ], "skillCount" : 28, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Mid", "dataQualityScore" : 0.8888889, "_score" : 918.6823, "daysOld" : 3, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.98 }, { "id" : "6a2cb20674d8ee00a09dee86", "title" : "Application Security Engineer", "industry" : "IT", "salary" : { "min" : 65000.0, "max" : 95000.0, "currency" : "GBP", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Mid-level Application Security Engineer in the UK technology industry, adjusted for remote work and mid-level experience." }, "location" : "UK", "locations" : [ "UK" ], "certifications" : [ "OSCP", "OSWE" ], "timestamp" : "2026-06-15T23:03:24.564", "fingerprint" : "f1caef098b51131126dd1fb6d8cf0ed28739ad97152f9fd7f7ba5f7753421431", "source" : "lever", "language" : "en", "applyUrl" : "https://jobs.lever.co/jobgether/508d976b-7587-4137-b75c-2601fbc6102f/apply", "externalId" : "508d976b-7587-4137-b75c-2601fbc6102f", "industryFunction" : { }, "structuredLocations" : [ { "country" : "United Kingdom", "continent" : "eu", "workMode" : "remote" } ], "locationText" : "United Kingdom", "employmentType" : "FULL_TIME", "experienceMinYears" : 4, "experienceMaxYears" : 5, "experienceLevel" : "Mid", "technicalSkills" : "Python, Go, Java, JavaScript, OWASP Top 10, Burp Suite, OWASP ZAP, Semgrep, SAML, OAuth, OIDC", "professionalSkills" : [ "Risk assessment", "Secure coding" ], "hardSkillsList" : [ "Application security", "Secure software development", "Cybersecurity engineering", "Penetration testing", "Threat modeling", "Risk assessments", "Secure coding standards", "Security automation", "Compliance translation" ], "softSkillsList" : [ "Problem-solving skills" ], "hardSkills" : [ { "name" : "Application security", "level" : "intermediate" }, { "name" : "Secure software development", "level" : "intermediate" }, { "name" : "Cybersecurity engineering", "level" : "intermediate" }, { "name" : "Penetration testing", "level" : "intermediate" }, { "name" : "Threat modeling", "level" : "intermediate" }, { "name" : "Risk assessments", "level" : "intermediate" }, { "name" : "Secure coding standards", "level" : "intermediate" }, { "name" : "Security automation", "level" : "intermediate" }, { "name" : "Compliance translation", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Problem-solving skills" } ], "majorSkills" : "Application security, Secure coding, Threat modeling", "majorSkillsList" : [ "Application security", "Secure coding", "Threat modeling" ], "coreResponsibilities" : "Identify application security vulnerabilities, Analyze application security vulnerabilities, Remediate application security vulnerabilities, Build ASPM tools, Maintain ASPM tools, Enhance ASPM tools, Integrate security best practices, Conduct manual penetration testing, Conduct automated penetration testing, Lead threat modeling sessions, Lead risk assessments, Develop secure coding standards, Maintain secure coding standards, Promote secure coding standards, Provide guidance to internal teams, Provide support to internal teams, Stay up to date with security threats, Contribute to continuous improvement", "teamCollaboration" : "Close collaboration with development; Collaboration with platform engineering; Collaborating effectively in distributed environments", "domainKnowledge" : "Application security posture management; Software development lifecycle; Web vulnerabilities; System vulnerabilities; Authentication protocols; Authorization protocols; Cloud computing; AI platforms; Distributed systems", "domainList" : [ "application-security-posture-management", "software-development-lifecycle", "web-vulnerabilities", "system-vulnerabilities", "authentication-protocols", "authorization-protocols", "cloud-computing", "ai-platforms", "distributed-systems" ], "domainSpecificKnowledge" : [ "Application security posture management", "Software development lifecycle", "Web vulnerabilities", "System vulnerabilities", "Authentication protocols", "Authorization protocols", "Cloud computing", "AI platforms", "Distributed systems" ], "toolProficiency" : [ "ASPM tools", "Burp Suite", "OWASP ZAP", "Semgrep" ], "communicationSkills" : "Explain technical concepts", "continuousLearning" : "Willingness to learn additional technologies; Continuously learn and adapt", "problemSolvingSkills" : "Problem-solving skills", "qualificationsBasic" : "4 years of experience in application security, Understanding of application security risks, Hands-on experience with secure coding practices, Proficiency in at least one programming language, Practical experience with security testing tools, Experience conducting threat modeling exercises, Solid understanding of authentication and authorization protocols, Analytical thinking and problem-solving skills, Excellent communication skills in English, Ability to work independently, Ability to collaborate effectively, A proactive mindset, Willingness to continuously learn", "qualificationsPreferred" : "Security certifications such as OSCP, Security certifications such as OSWE, Experience with security automation, Experience with compliance translation, Experience with exploitation of complex systems", "remoteFriendly" : true, "workSiteFlexibility" : "Flexible", "rawDescription" : "## Accountabilities Identify, analyze, and remediate application security vulnerabilities using modern application security posture management (ASPM) tools and related security technologies. Build, maintain, and enhance ASPM tools, rules, and automation to strengthen application security across engineering teams. Integrate security best practices into the software development lifecycle (SDLC) in close collaboration with development and platform engineering teams. Conduct manual and automated penetration testing to identify weaknesses in applications and supporting infrastructure. Lead threat modeling sessions and risk assessments for both new and existing applications to proactively address security risks. Develop, maintain, and promote secure coding standards and guidelines for engineering teams. Serve as a subject matter expert in application security, providing guidance and support to internal teams across the organization. Stay up to date with emerging security threats, vulnerabilities, attack techniques, and mitigation strategies. Contribute to the continuous improvement of security engineering processes, automation, and tooling. Requirements Minimum of 4 years of experience in application security, secure software development, or related cybersecurity engineering roles. Strong understanding of application security risks, including OWASP Top 10 and common web and system vulnerabilities. Hands-on experience with secure coding practices in languages such as Python, Go, Java, or JavaScript. Proficiency in at least one programming language (e.g., Go or Python) with willingness to learn additional technologies. Practical experience with security testing tools such as Burp Suite, OWASP ZAP, Semgrep, or equivalent solutions. Experience conducting threat modeling exercises and security risk assessments. Solid understanding of authentication and authorization protocols such as SAML, OAuth, or OIDC. Strong analytical thinking and problem-solving skills with attention to detail in complex systems. Excellent communication skills in English, with the ability to explain technical security concepts to engineering teams. Ability to work independently while collaborating effectively in distributed and fast-paced environments. A proactive mindset and willingness to continuously learn and adapt to new security challenges. Security certifications such as OSCP or OSWE are considered a strong advantage. Experience with security automation, compliance translation, or exploitation of complex systems is a plus. Benefits Competitive compensation package aligned with experience, skills, and location. Opportunity to work on large-scale, high-impact AI and cloud infrastructure projects. Flexible, remote-friendly working environment with strong autonomy and ownership. Career growth opportunities in a highly technical and fast-evolving security domain. Exposure to cutting-edge technologies in cloud computing, AI platforms, and distributed systems. Collaborative and innovative engineering culture focused on trust, learning, and impact. International environment working with highly skilled engineering and security teams. Inclusive workplace with equal opportunity policies and strong support for diversity. ## Additional Information How Jobgether works: We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team. We appreciate your interest and wish you the best! Why Apply Through Jobgether? Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time. #LI-CL1", "summaryDescription" : "Application Security Engineer. Skills: Application security, Secure coding, Threat modeling. Identify application security vulnerabilities. Analyze application security vulnerabilities", "postedDate" : "2026-06-12T04:49:26.653", "createdAt" : "2026-06-12T04:49:26.653", "lastUpdated" : "2026-06-15T23:03:24.564", "ingestTimestamp" : "2026-06-14T22:05:07.049", "mongoId" : "6a2cb20674d8ee00a09dee86", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "50k-75k", "hasSalary" : false, "allSkills" : [ "Application security", "Secure software development", "Cybersecurity engineering", "Penetration testing", "Threat modeling", "Risk assessments", "Secure coding standards", "Security automation", "Compliance translation", "Problem-solving skills", "Secure coding", "Risk assessment", "Application security posture management", "Software development lifecycle", "Web vulnerabilities", "System vulnerabilities", "Authentication protocols", "Authorization protocols", "Cloud computing", "AI platforms", "Distributed systems", "OSCP", "OSWE", "ASPM tools", "Burp Suite", "OWASP ZAP", "Semgrep" ], "skillCount" : 27, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Mid", "dataQualityScore" : 0.8888889, "_score" : 918.6435, "daysOld" : 3, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.98 }, { "id" : "6a2cb20674d8ee00a09dee8a", "title" : "Application Security Engineer", "industry" : "IT", "salary" : { "min" : 45000.0, "max" : 65000.0, "currency" : "EUR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Mid-level Application Security Engineer in Spain, adjusted for the technology industry and a mid-sized company." }, "location" : "Spain", "locations" : [ "Spain" ], "certifications" : [ "OSCP", "OSWE" ], "timestamp" : "2026-06-15T23:49:46.291", "fingerprint" : "41f3132c9d451f0d62f75afe81af968c76739eb1a70d506e16db2fd9e9aa9dd9", "source" : "lever", "language" : "en", "applyUrl" : "https://jobs.lever.co/jobgether/c1db0e68-abb8-47df-9207-8afc1777db47/apply", "externalId" : "c1db0e68-abb8-47df-9207-8afc1777db47", "industryFunction" : { }, "structuredLocations" : [ { "country" : "Spain", "continent" : "eu", "workMode" : "onsite" } ], "locationText" : "Spain", "employmentType" : "FULL_TIME", "experienceMinYears" : 4, "experienceMaxYears" : 5, "experienceLevel" : "Mid", "technicalSkills" : "Python, Go, Java, JavaScript, Burp Suite, OWASP ZAP, Semgrep", "professionalSkills" : [ "Risk assessment", "Secure coding" ], "hardSkillsList" : [ "Application security", "Secure software development", "Cybersecurity engineering", "Web vulnerabilities", "System vulnerabilities", "Authentication protocols", "Authorization protocols", "SAML", "OAuth", "OIDC" ], "softSkillsList" : [ "Problem-solving skills", "Willingness to learn" ], "hardSkills" : [ { "name" : "Application security", "level" : "intermediate" }, { "name" : "Secure software development", "level" : "intermediate" }, { "name" : "Cybersecurity engineering", "level" : "intermediate" }, { "name" : "Web vulnerabilities", "level" : "intermediate" }, { "name" : "System vulnerabilities", "level" : "intermediate" }, { "name" : "Authentication protocols", "level" : "intermediate" }, { "name" : "Authorization protocols", "level" : "intermediate" }, { "name" : "SAML", "level" : "intermediate" }, { "name" : "OAuth", "level" : "intermediate" }, { "name" : "OIDC", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Problem-solving skills" }, { "name" : "Willingness to learn" } ], "majorSkills" : "Application security, Secure coding, Threat modeling, Security automation", "majorSkillsList" : [ "Application security", "Secure coding", "Threat modeling", "Security automation" ], "coreResponsibilities" : "Identify application security vulnerabilities, Analyze application security vulnerabilities, Remediate application security vulnerabilities, Build ASPM tools, Maintain ASPM tools, Enhance ASPM tools, Integrate security best practices, Conduct manual penetration testing, Conduct automated penetration testing, Lead threat modeling sessions, Lead risk assessments, Develop secure coding standards, Maintain secure coding standards, Promote secure coding standards, Provide guidance to internal teams, Provide support to internal teams, Stay up to date with threats, Stay up to date with vulnerabilities, Stay up to date with attack techniques, Stay up to date with mitigation strategies, Contribute to continuous improvement, Improve security engineering processes, Improve security automation, Improve security tooling", "teamCollaboration" : "Engineering teams; Platform engineering teams; Development teams; Distributed environments", "domainKnowledge" : "Application security posture management; OWASP Top 10; Web vulnerabilities; System vulnerabilities; Authentication protocols; Authorization protocols; Cloud computing; AI platforms; Distributed systems", "domainList" : [ "application-security-posture-management", "owasp-top-10", "web-vulnerabilities", "system-vulnerabilities", "authentication-protocols", "authorization-protocols", "cloud-computing", "ai-platforms", "distributed-systems" ], "domainSpecificKnowledge" : [ "Application security posture management", "OWASP Top 10", "Web vulnerabilities", "System vulnerabilities", "Authentication protocols", "Authorization protocols", "Cloud computing", "AI platforms", "Distributed systems" ], "toolProficiency" : [ "ASPM tools", "Burp Suite", "OWASP ZAP", "Semgrep" ], "communicationSkills" : "Explain technical concepts", "continuousLearning" : "Continuously learn", "problemSolvingSkills" : "Problem-solving skills; Analytical thinking", "qualificationsBasic" : "4 years of experience in application security, Understanding of application security risks, Hands-on experience with secure coding practices, Proficiency in at least one programming language, Practical experience with security testing tools, Experience conducting threat modeling exercises, Solid understanding of authentication and authorization protocols, Analytical thinking and problem-solving skills, Excellent communication skills in English, Ability to work independently, Ability to collaborate effectively", "qualificationsPreferred" : "Security certifications such as OSCP, Security certifications such as OSWE, Experience with security automation, Experience with compliance translation, Experience with exploitation of complex systems", "remoteFriendly" : true, "workSiteFlexibility" : "Flexible", "rawDescription" : "## Accountabilities Identify, analyze, and remediate application security vulnerabilities using modern application security posture management (ASPM) tools and related security technologies. Build, maintain, and enhance ASPM tools, rules, and automation to strengthen application security across engineering teams. Integrate security best practices into the software development lifecycle (SDLC) in close collaboration with development and platform engineering teams. Conduct manual and automated penetration testing to identify weaknesses in applications and supporting infrastructure. Lead threat modeling sessions and risk assessments for both new and existing applications to proactively address security risks. Develop, maintain, and promote secure coding standards and guidelines for engineering teams. Serve as a subject matter expert in application security, providing guidance and support to internal teams across the organization. Stay up to date with emerging security threats, vulnerabilities, attack techniques, and mitigation strategies. Contribute to the continuous improvement of security engineering processes, automation, and tooling. Requirements Minimum of 4 years of experience in application security, secure software development, or related cybersecurity engineering roles. Strong understanding of application security risks, including OWASP Top 10 and common web and system vulnerabilities. Hands-on experience with secure coding practices in languages such as Python, Go, Java, or JavaScript. Proficiency in at least one programming language (e.g., Go or Python) with willingness to learn additional technologies. Practical experience with security testing tools such as Burp Suite, OWASP ZAP, Semgrep, or equivalent solutions. Experience conducting threat modeling exercises and security risk assessments. Solid understanding of authentication and authorization protocols such as SAML, OAuth, or OIDC. Strong analytical thinking and problem-solving skills with attention to detail in complex systems. Excellent communication skills in English, with the ability to explain technical security concepts to engineering teams. Ability to work independently while collaborating effectively in distributed and fast-paced environments. A proactive mindset and willingness to continuously learn and adapt to new security challenges. Security certifications such as OSCP or OSWE are considered a strong advantage. Experience with security automation, compliance translation, or exploitation of complex systems is a plus. Benefits Competitive compensation package aligned with experience, skills, and location. Opportunity to work on large-scale, high-impact AI and cloud infrastructure projects. Flexible, remote-friendly working environment with strong autonomy and ownership. Career growth opportunities in a highly technical and fast-evolving security domain. Exposure to cutting-edge technologies in cloud computing, AI platforms, and distributed systems. Collaborative and innovative engineering culture focused on trust, learning, and impact. International environment working with highly skilled engineering and security teams. Inclusive workplace with equal opportunity policies and strong support for diversity. ## Additional Information How Jobgether works: We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team. We appreciate your interest and wish you the best! Why Apply Through Jobgether? Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time. #LI-CL1", "summaryDescription" : "Application Security Engineer. Skills: Application security, Secure coding, Threat modeling, Security automation. Identify application security vulnerabilities. Analyze application security vulnerabilities", "postedDate" : "2026-06-12T04:49:43.518", "createdAt" : "2026-06-12T04:49:43.518", "lastUpdated" : "2026-06-15T23:49:46.291", "ingestTimestamp" : "2026-06-14T22:07:27.346", "mongoId" : "6a2cb20674d8ee00a09dee8a", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "30k-50k", "hasSalary" : false, "allSkills" : [ "Application security", "Secure software development", "Cybersecurity engineering", "Web vulnerabilities", "System vulnerabilities", "Authentication protocols", "Authorization protocols", "SAML", "OAuth", "OIDC", "Problem-solving skills", "Willingness to learn", "Secure coding", "Threat modeling", "Security automation", "Risk assessment", "Application security posture management", "OWASP Top 10", "Cloud computing", "AI platforms", "Distributed systems", "OSCP", "OSWE", "ASPM tools", "Burp Suite", "OWASP ZAP", "Semgrep" ], "skillCount" : 27, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Mid", "dataQualityScore" : 0.8888889, "_score" : 918.5913, "daysOld" : 3, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2cb20674d8ee00a09dee85", "title" : "Application Security Engineer", "industry" : "IT", "salary" : { "min" : 115000.0, "max" : 155000.0, "currency" : "CHF", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for Application Security Engineer in Switzerland, adjusted for mid-seniority and technology industry." }, "location" : "Switzerland", "locations" : [ "Switzerland" ], "certifications" : [ "OSCP", "OSWE" ], "timestamp" : "2026-06-15T22:03:28.754", "fingerprint" : "83fba14d32fd3a517e9b2dac17782cf79a4d7b8edba095ddccb77b29f16902e5", "source" : "lever", "language" : "en", "applyUrl" : "https://jobs.lever.co/jobgether/2b5142d9-401d-40d9-a7a3-5556be2346ae/apply", "externalId" : "2b5142d9-401d-40d9-a7a3-5556be2346ae", "industryFunction" : { }, "structuredLocations" : [ { "country" : "Switzerland", "continent" : "eu", "workMode" : "onsite" } ], "locationText" : "Switzerland", "employmentType" : "FULL_TIME", "experienceMinYears" : 4, "experienceMaxYears" : 5, "experienceLevel" : "Mid", "technicalSkills" : "Python, Go, Java, JavaScript, Burp Suite, OWASP ZAP, Semgrep, SAML, OAuth, OIDC", "professionalSkills" : [ "Risk assessment", "Secure coding" ], "hardSkillsList" : [ "Application security", "Secure software development", "Cybersecurity engineering", "Secure coding practices", "Penetration testing", "Threat modeling", "Risk assessments", "Authentication protocols", "Authorization protocols" ], "softSkillsList" : [ "Problem-solving skills", "Independent work", "Effective collaboration", "Proactive mindset", "Continuous learning", "Adaptability" ], "hardSkills" : [ { "name" : "Application security", "level" : "intermediate" }, { "name" : "Secure software development", "level" : "intermediate" }, { "name" : "Cybersecurity engineering", "level" : "intermediate" }, { "name" : "Secure coding practices", "level" : "intermediate" }, { "name" : "Penetration testing", "level" : "intermediate" }, { "name" : "Threat modeling", "level" : "intermediate" }, { "name" : "Risk assessments", "level" : "intermediate" }, { "name" : "Authentication protocols", "level" : "intermediate" }, { "name" : "Authorization protocols", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Problem-solving skills" }, { "name" : "Independent work" }, { "name" : "Effective collaboration" }, { "name" : "Proactive mindset" }, { "name" : "Continuous learning" }, { "name" : "Adaptability" } ], "majorSkills" : "Application security, Secure coding, Penetration testing, Threat modeling", "majorSkillsList" : [ "Application security", "Secure coding", "Penetration testing", "Threat modeling" ], "coreResponsibilities" : "Identify application security vulnerabilities, Analyze application security vulnerabilities, Remediate application security vulnerabilities, Build ASPM tools, Maintain ASPM tools, Enhance ASPM tools, Integrate security best practices, Conduct manual penetration testing, Conduct automated penetration testing, Lead threat modeling sessions, Lead risk assessments, Develop secure coding standards, Maintain secure coding standards, Promote secure coding standards, Provide guidance to internal teams, Provide support to internal teams, Stay up to date with threats, Stay up to date with vulnerabilities, Stay up to date with attack techniques, Stay up to date with mitigation strategies, Contribute to process improvement, Contribute to automation improvement, Contribute to tooling improvement", "teamCollaboration" : "Engineering teams; Platform engineering teams; Development teams; Distributed environments", "domainKnowledge" : "Application security posture management; OWASP Top 10; Web vulnerabilities; System vulnerabilities; Authentication protocols; Authorization protocols; AI infrastructure; Cloud infrastructure; Distributed systems", "domainList" : [ "application-security-posture-management", "owasp-top-10", "web-vulnerabilities", "system-vulnerabilities", "authentication-protocols", "authorization-protocols", "ai-infrastructure", "cloud-infrastructure", "distributed-systems" ], "domainSpecificKnowledge" : [ "Application security posture management", "OWASP Top 10", "Web vulnerabilities", "System vulnerabilities", "Authentication protocols", "Authorization protocols", "AI infrastructure", "Cloud infrastructure", "Distributed systems" ], "toolProficiency" : [ "ASPM tools", "Burp Suite", "OWASP ZAP", "Semgrep" ], "communicationSkills" : "Explain technical concepts", "continuousLearning" : "Willingness to learn additional technologies; Continuously learn and adapt", "problemSolvingSkills" : "Analytical thinking; Problem-solving skills", "qualificationsBasic" : "4 years of experience in application security, Understanding of application security risks, Hands-on experience with secure coding practices, Proficiency in at least one programming language, Practical experience with security testing tools, Experience conducting threat modeling exercises, Solid understanding of authentication and authorization protocols, Analytical thinking and problem-solving skills, Excellent communication skills in English, Ability to work independently, Ability to collaborate effectively", "qualificationsPreferred" : "Security certifications such as OSCP, Security certifications such as OSWE, Experience with security automation, Experience with compliance translation, Experience with exploitation of complex systems", "remoteFriendly" : true, "workSiteFlexibility" : "Flexible", "rawDescription" : "## Accountabilities Identify, analyze, and remediate application security vulnerabilities using modern application security posture management (ASPM) tools and related security technologies. Build, maintain, and enhance ASPM tools, rules, and automation to strengthen application security across engineering teams. Integrate security best practices into the software development lifecycle (SDLC) in close collaboration with development and platform engineering teams. Conduct manual and automated penetration testing to identify weaknesses in applications and supporting infrastructure. Lead threat modeling sessions and risk assessments for both new and existing applications to proactively address security risks. Develop, maintain, and promote secure coding standards and guidelines for engineering teams. Serve as a subject matter expert in application security, providing guidance and support to internal teams across the organization. Stay up to date with emerging security threats, vulnerabilities, attack techniques, and mitigation strategies. Contribute to the continuous improvement of security engineering processes, automation, and tooling. Requirements Minimum of 4 years of experience in application security, secure software development, or related cybersecurity engineering roles. Strong understanding of application security risks, including OWASP Top 10 and common web and system vulnerabilities. Hands-on experience with secure coding practices in languages such as Python, Go, Java, or JavaScript. Proficiency in at least one programming language (e.g., Go or Python) with willingness to learn additional technologies. Practical experience with security testing tools such as Burp Suite, OWASP ZAP, Semgrep, or equivalent solutions. Experience conducting threat modeling exercises and security risk assessments. Solid understanding of authentication and authorization protocols such as SAML, OAuth, or OIDC. Strong analytical thinking and problem-solving skills with attention to detail in complex systems. Excellent communication skills in English, with the ability to explain technical security concepts to engineering teams. Ability to work independently while collaborating effectively in distributed and fast-paced environments. A proactive mindset and willingness to continuously learn and adapt to new security challenges. Security certifications such as OSCP or OSWE are considered a strong advantage. Experience with security automation, compliance translation, or exploitation of complex systems is a plus. Benefits Competitive compensation package aligned with experience, skills, and location. Opportunity to work on large-scale, high-impact AI and cloud infrastructure projects. Flexible, remote-friendly working environment with strong autonomy and ownership. Career growth opportunities in a highly technical and fast-evolving security domain. Exposure to cutting-edge technologies in cloud computing, AI platforms, and distributed systems. Collaborative and innovative engineering culture focused on trust, learning, and impact. International environment working with highly skilled engineering and security teams. Inclusive workplace with equal opportunity policies and strong support for diversity. ## Additional Information How Jobgether works: We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team. We appreciate your interest and wish you the best! Why Apply Through Jobgether? Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time. #LI-CL1", "summaryDescription" : "Application Security Engineer. Skills: Application security, Secure coding, Penetration testing, Threat modeling. Identify application security vulnerabilities. Analyze application security vulnerabilities", "postedDate" : "2026-06-12T04:50:13.334", "createdAt" : "2026-06-12T04:50:13.334", "lastUpdated" : "2026-06-15T22:03:28.754", "ingestTimestamp" : "2026-06-14T22:02:57.991", "mongoId" : "6a2cb20674d8ee00a09dee85", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "100k-150k", "hasSalary" : false, "allSkills" : [ "Application security", "Secure software development", "Cybersecurity engineering", "Secure coding practices", "Penetration testing", "Threat modeling", "Risk assessments", "Authentication protocols", "Authorization protocols", "Problem-solving skills", "Independent work", "Effective collaboration", "Proactive mindset", "Continuous learning", "Adaptability", "Secure coding", "Risk assessment", "Application security posture management", "OWASP Top 10", "Web vulnerabilities", "System vulnerabilities", "AI infrastructure", "Cloud infrastructure", "Distributed systems", "OSCP", "OSWE", "ASPM tools", "Burp Suite", "OWASP ZAP", "Semgrep" ], "skillCount" : 30, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Mid", "dataQualityScore" : 0.8888889, "_score" : 917.22034, "daysOld" : 3, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.98 } ], "status" : 200, "message" : "OK", "pagination" : { "page" : 0, "limit" : 50, "totalCount" : 95776, "totalPages" : 1916, "hasNext" : true, "hasPrevious" : false } }

Engineer Principal Software Application Security Architect Jobs in Austin

Principal Application Security Consultant, National Security

Application and Product Security Principal

Senior Software Engineer – Application & Cloud Security

Application Security Engineer

Application Security Engineer

Application Security Engineer | Senior

Application Security Engineer

Application Security Engineer | Senior

Senior Software Security Architect

Application Security Engineer

Principal Software Engineer

Principal Software Engineer

Principal Software Engineer

Cloud Application Security Engineer

Principal Software Engineer (AI)

Principal Software Engineer

Senior Application Security Engineer

Senior Application Security Engineer

Application Security Engineer

Application Security Engineer

Application Architect

Application Solution Architect

Lead Application Security Engineer

Principal Software Engineer

Principal Security Software Engineer

Senior Security Analyst- Application Security & DevSecOps

Senior Security Analyst- Application Security & DevSecOps

Principal Software Engineer

Principal Security Operation Engineer

Principal Software Engineer

Principal Software Engineer (AI)

Principal Cloud Network Security Engineer

Application Architect

Principal Software Engineer, Physics

Principal Architect

Principal Software Engineer, Physics

Sr. Security Engineer, Stores Application Security

Principal Software Engineer

Principal Architect

Principal Software Engineer

Sr. Application Architect

Application Security Engineer

Principal Cloud Architect

Principal Security Engineer

Senior Application Security Engineer (AI & Vulnerability)

Principal Cloud Architect

Application Security Engineer

Application Security Engineer

Application Security Engineer

Application Security Engineer

Common Questions