Senior Application Security Engineer

Key details

Full job description

The Senior Application Security Engineer will drive secure software development and application security maturity at TripleLift. Responsibilities include building and maintaining a global security compliance program based on NIST CSF, scaling application security through automated testing (SAST, DAST, SCA), championing secure SDLC practices, automating security testing in CI/CD pipelines, administering GitHub Advanced Security tools, conducting threat modeling and design reviews, managing vulnerability programs, performing penetration testing, monitoring application-layer security threats, collaborating with product and engineering teams on security design, enhancing authentication and data protection, facilitating incident handling, evangelizing security best practices, and improving security program maturity. Requirements include 5+ years in application security or related roles, expertise with GHAS, SAST/DAST/SCA tools, CI/CD security integration, penetration testing, knowledge of OWASP Top 10 and other vulnerabilities, threat modeling, security code reviews in multiple languages, understanding of cybersecurity frameworks (NIST CSF, PCI, SOC2, HITRUST, ISO 27001/2), strong AWS security knowledge, and ability to work independently in a fast-paced environment. Preferred experience includes ad-tech industry knowledge, AI/LLM-based security tools, and cybersecurity certifications (OSCP, GWAPT, CISSP, CISA). Benefits include medical, dental, vision plans, flexible PTO, and 401k with employer match. Salary range is $160,000 to $200,000 USD.