II - Application Security Engineer

Application Security Engineer – Staff 2

Primary Locations – Hybrid: 3 days in office in either Atlanta, GA or Mountain View, CA. Fully remote individuals within the United States may be considered if they meet all qualifications.

This senior, hands‑on technical leadership role on our Product Security team focuses on setting the technical direction for how we secure software across Omnissa’s product portfolio. No direct people management; impact through expertise and influence.

• Set technical direction for application security across the portfolio – defining standards, patterns, and guardrails adopted by engineering teams at scale.
• Lead threat modeling for distributed, cloud‑native, and mobile architectures as a repeatable practice embedded in the development lifecycle.
• Define security architecture reference designs that reduce the need for per‑feature security reviews.
• Identify architectural risk early and influence roadmap and design decisions before implementation begins.
• Perform manual code review and application security testing across Java and C++ codebases; codify findings into reusable guidance.
• Scale code review coverage using AI‑assisted analysis and custom CodeQL queries tuned to Omnissa's codebase.
• Conduct variant analysis to ensure confirmed vulnerability classes are remediated consistently across the codebase.
• Triage and validate externally reported vulnerabilities – assess exploitability, severity, business impact, and drive remediation to closure.
• Translate findings into systemic recommendations addressing root‑cause design or implementation gaps.
• Define and evolve the SDL – identify gaps, drive measurable improvements, and own the iteration cycle.
• Improve the feature security review program so that security work shifts left into design and scales across teams.
• Mature the product penetration testing program – define scope, methodology, and cadence; ensure findings drive systemic fixes.
• Build and scale the security champions program; mentor engineers and create training that extends security capability beyond the security team.
• Establish metrics that make program effectiveness visible to engineering and product leadership.

• First 3 months:
  Build deep understanding of product architecture, development toolchain, and release process; influence in‑flight architectural decisions; identify highest‑leverage gaps.
• First 6 months:
  Own the security strategy for a significant portfolio area; steer cross‑team prioritization and backlog decisions; iterate improvements on the SDL.
• 12 months and beyond:
  Deliver measurable, organization‑level improvements in security posture – e.g., reduced mean time to remediation, broadened threat model coverage, new automation adopted across teams; become go‑to technical authority.

• Report to the Director of Product Security; take technical direction from the Manager of Application Security, with high degree of autonomy.
• Collaborate with security engineers, product managers and developers focused on innovation and delivery.
• Build trust among team members and stakeholders; commit to customer success.
• Operate in a transparent, communicative environment that emphasizes work‑life balance and enjoyment of work.
• Identify and drive improvements to security processes – internal workflows and partner‑facing interfaces – to reduce friction for development teams and increase daily effectiveness.

• 12+ years of hands‑on application security experience with demonstrated technical depth and influence.
• Deep knowledge of application security vulnerabilities and mitigation techniques, and judgment to prioritize them by real business and customer impact.
• Proven ability to lead threat modeling, secure design, and security architecture for complex distributed and cloud‑native systems.
• Proficiency in Java or C++, with ability to read, reason about, and review production code.
• Security breadth across application, system, cloud, and mobile domains.
• History of driving technical change and raising the security bar across teams, and mentoring senior engineers.
• Excellent…