Sr. Application Security Engineer

You'll help strengthen and scale secure development practices across Gen's products and platforms. Working closely with engineering, platform and product teams, you'll embed security throughout the software development lifecycle while enabling teams to build and deliver software efficiently and securely. This is a senior individual contributor role where success comes through technical expertise, collaboration and influence. You'll combine hands-on application security work with ownership of key AppSec initiatives, helping teams identify and reduce risk, improve security tooling and drive measurable security improvements across the organization. You'll work across a diverse technology landscape, contributing to security reviews, vulnerability management, developer enablement and the evolution of the application security program. You'll partner with engineering, use AI to improve security and development workflows, and foster a strong security culture through collaboration and knowledge sharing.

Responsibilities

• Partner with engineering, platform and product teams to integrate security into development workflows and release processes
• Perform application security reviews, threat modeling and security assessments for new features, services and architectural changes
• Provide guidance on secure coding practices, vulnerability remediation and application hardening
• Evaluate, implement and optimize application security tooling, including SAST, DAST and Software Composition Analysis (SCA)
• Integrate security controls and testing into CI/CD pipelines and engineering workflows
• Support vulnerability triage, prioritization and remediation efforts across teams
• Contribute to incident investigations, root cause analysis and long-term security improvements
• Develop security standards, documentation, playbooks and developer guidance
• Define and track security metrics to improve visibility, coverage and risk reduction
• Evaluate emerging security technologies and help drive adoption of tools that create value for engineering teams
• Promote secure AI-assisted development practices and responsible use of AI technologies
• Foster a strong security culture through collaboration, enablement and knowledge sharing

Requirements

• Experience in Application Security, Product Security, Secure Software Development or a related field
• Strong understanding of application vulnerabilities, secure coding principles and frameworks such as OWASP Top 10
• Experience with application security testing technologies, including SAST, DAST, SCA and vulnerability management platforms
• Ability to understand source code, infrastructure definitions, configuration files and CI/CD pipelines
• Strong understanding of modern software development practices and developer workflows
• Experience integrating security controls into development and delivery pipelines
• Ability to assess security risks pragmatically and communicate effectively with both technical and non-technical stakeholders
• Strong collaboration skills and experience working across engineering, product and security teams
• Analytical mindset with a data-informed approach to prioritization and decision making
• Experience evaluating security tools, technologies and vendor solutions
• Familiarity with AI-assisted engineering workflows and secure adoption of AI technologies
• Strong written and verbal English communication skills