Senior Application Security Engineer at Instructure who owns the security of the application domain day to day: vulnerability triage and remediation, SAST/SCA pipeline coverage, CI/CD security automation, threat modeling, secure code review, and developer enablement, plus bug bounty triage and incident escalation. Remote, hybrid, or in-office work is offered.