Senior Application Security Engineer (Hybrid - US)

The Senior Application Security Engineer will manage security and risk for internally developed applications, making risk-based decisions and recommending/validating controls. Responsibilities include contributing to the application security roadmap, consulting with engineers on requirements and adoption, conducting security-focused pull request reviews, and serving as a steward for SAST/scanning by triaging findings and driving remediation. The engineer will build reference implementations in Django/Python for security patterns, map SOC 2/NIST requirements to engineering work, and perform threat modeling and architecture reviews to document secure patterns. They will oversee security tasks within the SDLC, collaborate with developers and leads, act as a liaison between business security/privacy/compliance requirements and development teams, and participate as a subject matter expert in security architecture. The role involves recommending application security improvements based on best practices and OWASP standards, reviewing code changes for security impact, ensuring compliance with company security policies, and managing all security-related tickets.