Senior Engineer, Application Security (R6290)

The role

This Senior Application Security Engineer will join the cybersecurity engineering team for the Hivemind Enterprise product. The role covers defining application security policies, setting up scanning tools in CI/CD pipelines, and working with developers to fix security issues. It also includes threat modeling and validating designs against secure coding standards.

What you will do

• Help define application security policies
• Deploy and configure scanning tools within CI/CD pipelines
• Review scanning results
• Work directly with developers to identify and fix security issues in code
• Work with the architecture team to design a secure-by-default software product
• Perform threat modeling
• Validate designs meet secure coding standards

Required qualifications

• Bachelor's degree with approximately 5+ years of relevant experience, or Master's degree with approximately 4+ years of relevant experience, in cybersecurity, software engineering, or a closely relate
• Experience developing or testing cyber secure code
• Strong understanding of modern software engineering practices, including CI/CD, automated testing, configuration management, and software lifecycle processes
• Familiarity with threat modeling
• Experience with software analysis tools, including static analysis, dynamic analysis, dependency mapping, CVE scanning
• Comfortable working in a Linux development environment
• Strong organizational, communication, and cross-functional collaboration skills
• Basic understanding of key cryptography concepts

Nice to have

• Previous experience on an application security team for a large, complex software product
• Experience as a DevSecOps engineer, especially in a GitLab environment
• Experience writing software or testing Python, C/C++, and/or Go
• Red-teaming experience
• Software reverse engineering skills

Benefits

• Bonus
• Benefits
• Equity (full-time regular employees)
• Temporary benefits package, applicable after 60 days of employment (temporary employees)

Before you apply

• All offers are contingent on a cleared background and possible reference check
• Military fellows and part-time employees are not eligible for benefits
• Salary depends on factors including skill set, level of experience, licenses and certifications, and specific work location

About the company

Shield AI is a venture-backed defense-tech company with the mission of protecting service members and civilians with intelligent systems. Its products include Hivemind autonomy software, V-BAT and X-BAT aircraft, and Aechelon simulation and synthetic reality technologies.