Staff Application Security Engineer (R5949)

Shield AI
United States
Workplace: RemoteFull timeUSD 143,000 - 214,000 annuallyFunction: CybersecurityExperience: 7+ yearsSkills: ["Communication","Partnering","Triage prioritization","Leadership","Risk awareness"]

Build and advance a developer-centered application security program by establishing company-wide secure SDLC policies, translating them into practical engineering requirements, and partnering with product and platform teams. Assess and mature CI/CD, source-control, and release processes; create security guidance, guardrails, and developer enablement. Lead threat modeling and security design reviews, operationalize appsec tooling (SAST/DAST/SCA and more), and improve software supply-chain security and vulnerability management across teams.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Shield AI
Shield AI
22 hours ago

Staff Application Security Engineer (R5949)

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 3 hours agoStatus: Live

Job Summary

Build and advance a developer-centered application security program by establishing company-wide secure SDLC policies, translating them into practical engineering requirements, and partnering with product and platform teams. Assess and mature CI/CD, source-control, and release processes; create security guidance, guardrails, and developer enablement. Lead threat modeling and security design reviews, operationalize appsec tooling (SAST/DAST/SCA and more), and improve software supply-chain security and vulnerability management across teams.
Location: United States
Workplace: Remote
Employment Type: Full time
Job Function: Cybersecurity
Seniority: Mid level

Key Responsibilities

  • •Establish, maintain, and continuously improve company-wide secure SDLC policies, standards, and control objectives with supporting evidence requirements.
  • •Assess development teams, CI/CD pipelines, source-control practices, build environments, and release processes; define and lead improvement roadmaps.
  • •Develop secure-development guidance, reference architectures, reusable patterns, security guardrails, exception processes, and developer enablement materials.
  • •Partner with development teams to identify, triage, prioritize, remediate, and verify application-security findings.
  • •Operationalize application-security tooling and mature software supply-chain security practices (SBOM/VEX, provenance, signing/verification, artifact repositories) while supporting customer/security incident response activities.

Pay and Benefits

Salary: USD 143,000 - 214,000 annually
Equity and Bonus:Equity
Perks:Equity

Key Requirements

  • •7+ years in application security, product security, DevSecOps, secure software engineering, cybersecurity engineering, or a closely related field.
  • •Experience designing, implementing, or maturing secure SDLC/application-security programs across multiple engineering teams.
  • •Strong working knowledge of secure coding, application-security testing, vulnerability management, software delivery, and DevSecOps principles.
  • •Hands-on experience with SAST, DAST, SCA, dependency vulnerability management, and secrets scanning/tooling.
  • •Experience with threat modeling and security design/review or security requirements definition.
Experience:7+ yearsCybersecurityDevSecOpsApplication securitySoftware supply chain security
Skills:CommunicationPartneringTriage prioritizationLeadershipRisk awareness
Certifications:CSSLPCISSPGWAPTGWEBOSWEGIAC
Tech Stack:SASTDASTSCASecrets detectionInfrastructure-as-code security scanningContainer image security scanningAPI securityCloud-native application securityCI/CDSource-controlSoftware bills of materialsSBOMVEXCSAFSPDXCycloneDXBuild provenanceArtifact signingSLSAKubernetes

Company Brief

Shield AI
Develops AI-powered autonomy and software for military aircraft and drones to enable autonomous ISR and combat missions, integrating perception, navigation, and mission planning for defense customers.
Industry: Defense Technology
Company Size: Large (251 to 1,000 employees)
Growth: Scaleup
Funding: Series E+
Headquarters: San Diego, United States
Founded: 2015
WebsiteLinkedIn