Senior Application Security Engineer

For our client, we are seeking a Senior Application Security Engineer to join the team of a leader in the Hospitality & Recreation space.

This role will strengthen secure software delivery across the full SDLC, with a focus on scalable automation, secure design, and practical risk reduction. You will partner closely with developers, architects, and product managers to embed security into the way distributed systems are built and maintained. The position also supports threat modeling, architecture decisions, code review, and hands-on testing to help teams prevent vulnerabilities and respond quickly to security findings.

In addition, you will influence product security strategy, mentor technical teams, and help build a culture of secure-by-default engineering.

Location:

Remote

Compensation: $177,300 – $265,900 annually

• Lead security initiatives across the SDLC and improve development practices through scalable automation
• Conduct and guide threat modeling and security requirements during design phases
• Collaborate with developers, architects, and product managers to align security with business goals
• Oversee security architecture and code reviews for distributed systems
• Perform hands-on testing to identify risks and drive remediation with vulnerability and incident response teams
• Advance the product security strategy through cross-functional initiatives and cultural influence
• Mentor engineers and practitioners, promoting secure-by-default thinking and shared accountability

• 7+ years in information security and 3+ years in software development
• Bachelor's degree or equivalent in Computer Science, Information Security, or a related field
• Strong communication and leadership skills, with the ability to influence both technical and non-technical collaborators
• Proven ability to lead initiatives independently with a proactive, hands-on approach
• Deep understanding of enterprise and cloud-native architectures and secure design principles
• Expertise in network and web protocols, including TCP/IP, TLS, HTTPS, OAuth 2.0, and OpenID Connect, as well as common attack vectors
• Proven expertise in guiding security development and code evaluations with actionable, risk-based recommendations
• Skilled in multiple programming languages such as Java, C/C++, JavaScript, and Python, and in mitigating vulnerabilities such as OWASP Top 10

• Top-tier medical, dental, and vision coverage
• Matching 401(k) plan
• Paid time off and wellness program
• Employee discounts for products
• Potential eligibility for a bonus package

Our client is an equal opportunity employer. We encourage you to apply even if you don’t meet every qualification—your background could be exactly what this team needs.