New York Licensed Application Security Engineer (23)

Summary

As a Staff Application Security Engineer, the full-time position will own the technical strategy to secure critical attack surfaces, lead architecture reviews, and design AI agents to enhance the secure software development lifecycle, with a hybrid work arrangement based in New York.Key responsibilities:Own and evolve the Gemini Secure Software Development Lifecycle guardrails as an application security subject matter expertLead architecture reviews, threat modeling, code reviews, and penetration testing for high-risk applications and servicesDesign and build AI agents throughout the SDLC for automated threat modeling and secure code generationRequired qualifications:Proven ability to perform design reviews, threat modeling, secure code reviews, and penetration testing with an attacker mindsetStrong background in application security best practices and familiarity with common vulnerabilitiesDeep code review proficiency in Scala, Java, Go, or other common languages, with hands-on experience in Python or GoExperience implementing custom detection and prevention application security controls beyond OWASP Top 10Typically 7-10+ years of experience in application security, product security, or similar roles

Job Description

As a Staff Application Security Engineer, the full-time position will own the technical strategy to secure critical attack surfaces, lead architecture reviews, and design AI agents to enhance the secure software development lifecycle, with a hybrid work arrangement based in New York.Key responsibilities:Own and evolve the Gemini Secure Software Development Lifecycle guardrails as an application security subject matter expertLead architecture reviews, threat modeling, code reviews, and penetration testing for high-risk applications and servicesDesign and build AI agents throughout the SDLC for automated threat modeling and secure code generationRequired qualifications:Proven ability to perform design reviews, threat modeling, secure code reviews, and penetration testing with an attacker mindsetStrong background in application security best practices and familiarity with common vulnerabilitiesDeep code review proficiency in Scala, Java, Go, or other common languages, with hands-on experience in Python or GoExperience implementing custom detection and prevention application security controls beyond OWASP Top 10Typically 7-10+ years of experience in application security, product security, or similar roles