Application Security Engineer

Job Description

We are Omnissa!

Omnissa is the first AI‑driven digital work platform, built to support flexible, secure, work‑from anywhere experiences. We integrate industry‑leading solutions—including Unified Endpoint Management, Virtual Apps and Desktops, Digital Employee Experience, and Security & Compliance—into a seamless, autonomous workspace that adapts to how people work. Our platform boosts employee engagement while optimizing IT operations, security, and cost. Guided by our Core Values—Act in Alignment, Build Trust, Foster Inclusiveness, Drive Efficiency, and Maximize Customer Value—we’re growing rapidly and committed to delivering meaningful impact.

If you're passionate about shaping the future of work, we’d love to hear from you. At Omnissa, we are committed to maintaining a fair, consistent, and secure hiring process for all candidates. As part of this approach, we use standard interview and verification practices designed to ensure alignment and protect both candidates and the organization. These practices are applied thoughtfully and with respect for candidate privacy.

This is a hands‑on application security role for an engineer who can own well‑scoped work and deliver it independently. You’ll contribute across multiple areas of the security program — from secure code reviews and application security testing to triaging vulnerabilities and building automation — collaborating with senior and staff engineers on the harder, more ambiguous problems. Omnissa’s portfolio spans six major product families and roughly a hundred products, so you’ll focus on assigned areas while steadily broadening your expertise and growing your scope and impact over time.

This role is about the security of the code we write — reading it, reviewing it, and helping engineers find, fix, and prevent vulnerabilities in our own software — not CVE tracking, dependency patching, or third‑party vulnerability management. It is deep, manual work: reasoning about source code to find issues that automated scanners miss, not operating SAST/DAST tools and forwarding their output.

If you have an analytical mind, a passion for software security, and thrive on solving problems, this role is for you. A successful candidate is dependable, communicates clearly, manages their time well and can identify and understand root causes.

• Lead threat modeling for the features and components in your area, and partner with senior engineers on threat models spanning complex or cross‑cutting architectures.
• Independently perform secure code reviews, manual application security testing, and penetration testing across assigned components, partnering with senior engineers on complex or distributed architectures.
• Triage and validate reported vulnerabilities in our products, assess severity and impact, and drive fixes to closure with engineering teams.
• Build and maintain automation and tooling that improve the security process.
• Identify recurring issues in your areas and recommend improvements to tooling or process.
• Document findings and guidance clearly, and collaborate with developers to strengthen secure development practices across the portfolio.

Report to the Director of Product Security and take direction from the Manager of Application Security. Work closely with a committed team of security engineers, product managers, and developers focused on innovation and getting things done. Build trust among team members and stakeholders, committing to customer success.…