Senior Application Security Engineer (Remote US)

Costa Mesa, California, United States

Apply with AI Apply

Not SpecifiedCompensation

Senior (5 to 8 years), Expert & Leadership (9+ years)Experience Level

Full TimeJob Type

UnknownVisa

Data and Technology, Financial Services, Healthcare, Automotive, Agribusiness, InsuranceIndustries

Requirements

Candidates must have over 5 years of direct experience in enterprise-level application security, with a strong understanding of MITRE, OWASP, SafeCode, and risk management methodologies related to integration/software testing. Experience in AppSec or DevSecOps, collaborating with developers to adopt and mature secure development practices is required. Proficiency with SAST, SCA, DAST, IAST, RASP, and other DevSecOps tools, including deploying, maintaining, operating, and improving these tools is essential. A solid background in software development, familiarity with development lifecycle processes and technologies, and experience with CI/CD pipelines and related technologies are necessary. Experience overseeing application integration between different teams and systems, as well as in business and technical requirements analysis, business process modeling/mapping, methodology development, and data mapping, is also required.

Responsibilities

The Senior Application Security Engineer will collaborate with development teams to understand their needs, assess risks, and customize solutions. They will implement and manage security tools (SAST, SCA, DAST) and integrate solutions into CI/CD pipelines. Responsibilities include reviewing applications against common flaws (e.g., OWASP Top 10) and reporting to senior management. The engineer will also work with Risk & Compliance teams on audits (e.g., SOC 2, PCI-DSS, HIPAA) and recommend relevant policies. Defining security guardrails through automated tool policies, SLAs, and custom rules is also a key duty.

Skills

Application Security

Secure Development Lifecycle (SDLC)

SAST

SCA

DAST

CI/CD pipelines

OWASP Top 10

Risk & Compliance

SOC 2

PCI-DSS

HIPAA

MITRE

SafeCode

Risk management

DevSecOps

Expedia

Travel booking platform for flights, hotels, rentals

About Expedia

Expedia Group operates in the travel industry, offering a wide range of services for travelers and travel-related businesses. It connects users with options for flights, hotels, car rentals, vacation packages, and activities through its various brands, including Expedia, Hotels.com, and Vrbo. Travelers can easily find and book trips that match their preferences and budgets. The company earns revenue primarily through commissions on bookings and advertising from travel service providers looking to promote their offerings. Additionally, Expedia Group supports its partners by providing access to valuable data and technology, helping them improve their operations and grow their businesses. The goal of Expedia Group is to create a seamless travel experience for users while maximizing the potential of its partners.

Bellevue, WashingtonHeadquarters

1996Year Founded

$3,277.3MTotal Funding

IPOCompany Stage

Consumer Goods, EntertainmentIndustries

10,001+Employees

Benefits

Competitive Paid Time Off

Travel Discounts

Healthcare Flexible Spending Accounts

Employee Assistance Program

Wellness & Travel Reimbursement

Workplace Accomodations

Medical, Dental, & Vision Insurance

Matching Gifts

New Parental Benefits

Risks

Riyadh Air's entry could increase competition, affecting Expedia's market share.

CFO transition may lead to strategic shifts impacting financial management and investor confidence.

Expedia's partnerships may strain resources, affecting service quality if not managed well.

Differentiation

Expedia offers a comprehensive suite of travel services under one platform.

The company leverages a diverse portfolio of brands like Hotels.com and Vrbo.

Expedia provides partners with valuable data and technology to optimize their offerings.

Upsides

Expedia can capitalize on the rise of 'workcations' with longer stay packages.

The trend of 'bleisure' travel offers opportunities for specialized leisure-business packages.

Increased demand for personalized travel experiences can enhance user engagement for Expedia.

Land your dream remote job 3x faster with AI

Try Jobo Free