Security Application Engineer

Responsibilities

The Security Application Engineer will continuously monitor infrastructure and application surface area for active threats, unauthorized access, potential vulnerabilities, and exposures; own and evolve the security architecture across GCP and GKE with a focus on Google Assured Workloads; review and secure Terraform-based infrastructure changes against CIS benchmarks, HIPAA, HITRUST, and other control frameworks; develop response playbooks, lead incident response efforts, and close the loop quickly when issues arise; actively respond to and mitigate security incidents in real time; run internal red-team-style exercises and simulate real-world attacks to harden defenses; correlate data across logs, traces, and metrics using Datadog to detect anomalies; perform continuous penetration testing and active scanning of infrastructure, networks, and services; secure product-layer surfaces by implementing and enforcing security controls across applications and APIs; integrate and monitor security tooling into GitHub workflows and CI/CD pipelines; collaborate with engineering on secure coding standards and architecture reviews; maintain compliance documentation and conduct internal security audits.