Sr. Application Security Engineer

The role

You will strengthen and scale secure development practices across products and platforms. You will work with engineering, platform, and product teams to embed security throughout the software development lifecycle.

What you will do

• Partner with engineering, platform and product teams to integrate security into development workflows and release processes.
• Perform application security reviews, threat modeling and security assessments.
• Provide guidance on secure coding practices, vulnerability remediation and application hardening.
• Evaluate, implement and optimize application security tooling including SAST, DAST and SCA.
• Integrate security controls and testing into CI/CD pipelines and engineering workflows.
• Support vulnerability triage, prioritization and remediation efforts across teams.
• Contribute to incident investigations, root cause analysis and long-term security improvements.
• Develop security standards, documentation, playbooks and developer guidance.
• Define and track security metrics to improve visibility, coverage and risk reduction.
• Evaluate emerging security technologies and promote secure AI-assisted development practices.

Required qualifications

• Experience in Application Security, Product Security, Secure Software Development or a related field.
• Strong understanding of application vulnerabilities, secure coding principles and frameworks such as OWASP Top 10.
• Experience with application security testing technologies, including SAST, DAST, SCA and vulnerability management platforms.
• Ability to understand source code, infrastructure definitions, configuration files and CI/CD pipelines.
• Strong understanding of modern software development practices and developer workflows.
• Experience integrating security controls into development and delivery pipelines.
• Ability to assess security risks pragmatically and communicate effectively with both technical and non-technical stakeholders.
• Strong collaboration skills and experience working across engineering, product and security teams.
• Analytical mindset with a data-informed approach to prioritization and decision making.
• Experience evaluating security tools, technologies and vendor solutions.
• Familiarity with AI-assisted engineering workflows and secure adoption of AI technologies.
• Strong written and verbal English communication skills.

Nice to have

• API Security
• Mobile Application Security (iOS and Android)
• Secrets Management and Credential Security
• Cloud-native platforms and modern application architectures
• Security enablement programs and developer education initiatives
• Scaling application security programs in large and complex engineering environments

Benefits

• flexible working options
• time off
• competitive pay
• benefits
• well-being programs

Before you apply

• The interview process consists of four stages.

About the company

Gen is a global company dedicated to powering Digital Freedom through its trusted consumer brands including Norton, Avast, LifeLock, MoneyLion and more. They deliver cybersecurity, online privacy, identity protection and financial wellness solutions to nearly 500 million users.