Application Security Strategy

Application Security Strategy Engineer Jobs

2 jobs found

14d ago

Principal Product and Application Security Engineer / Founding Engineer

Motion Recruitment San Francisco, CA

San Francisco, CA

14d ago

Full time Application Security Application Security Engineering Application Security Strategy

Apply Now

Job Description

The Principal Product and Application Security Engineer / Founding Engineer will be responsible for establishing the application security environment for a GPU cloud computing startup from the ground up. This role combines AppSec leadership with hands-on development, including experience relevant to GraphQL authorization.

Key Responsibilities

Establish and expand an application security (AppSec) program from the ground up, either as the initial AppSec hire or by building the security environment end to end.
Support business initiatives and collaborate with non-technical leaders to influence and drive decision-making while remaining hands on in development work.

Required Qualifications

8+ years of experience across application security, product security, and or DevSecOps.
Experience building out an AppSec program from the ground up is a huge plus, or experience serving as the first AppSec hire.
Experience with GraphQL authorization at scale.
Experience architecting or operating a home-grown authentication service.
Strong leadership background with the ability to remain actively involved in development while also contributing to business initiatives and working with non-technical leaders to support decision-making.
Startup experience is a big plus.
Must be currently authorized to work in the US on a full-time basis now and in the future.

Technology Focus

GraphQL

Location and Employment

San Francisco, CA 94102 (onsite).

Minimum experience: 8 years.

View full job page →

30d ago

Principal Application Security Engineer

Motion Recruitment Charlotte, NC

Charlotte, NC

30d ago Closed

Contract Application Security Application Security Strategy Cybersecurity Tools

This position is no longer accepting applications (closed Sep 14, 2026).

Job Description

Motion Recruitment is partnering with a well-known financial services company to hire a Principal Application Security Engineer for a 12-month contract in Charlotte, NC (Hybrid). This role is built for experienced engineering leaders who can shape enterprise application security strategy, modernize AppSec through automation, and expand security capabilities for AI and GenAI applications.

What You’ll Do

Serve as an expert consultant to develop or influence initiatives and resources for complex business and technical needs across Engineering.
Consult on strategy and resolution of highly complex, unique challenges using in-depth evaluation across multiple areas, delivering long-term, large-scale solutions.
Provide technical expertise to client senior leadership and strategically engage with client personnel.
Define and lead the Application Security strategy for DCMS in-scope applications using tier-based control models.
Evaluate current AppSec control coverage, establish baseline mappings by application tier, and identify control gaps.
Drive remediation and onboarding plans with application teams and stakeholders.
Partner with Application Security Champions and engineering teams to support consistent adoption of required AppSec controls.
Ensure alignment with enterprise SDLC requirements and defect remediation expectations.
Identify and deliver AI and GenAI use cases that reduce manual AppSec effort while improving security coverage.
Design and implement automated threat modeling using code, infrastructure-as-code, and application metadata.
Develop adversarial testing for GenAI and LLM-based applications, including prompt injection and abuse scenario coverage.
Lead initiatives for AI model scanning, integrity validation, and secure onboarding of models.
Define protections for AI-specific risks, including insecure prompt construction, tool misuse, and secrets exposure.
Drive modernization of AppSec controls via automation, rationalization, and platform integration.
Build proofs-of-concept and pilot new security capabilities, scaling successful approaches into production.
Influence simplification of AppSec processes to improve developer experience while maintaining strong risk controls.
Provide strategic guidance to senior leadership on Application Security priorities, risks, and investment decisions.
Influence cross-functional teams without direct authority to achieve enterprise security outcomes.
Research emerging threats and technologies and translate findings into actionable AppSec strategy.

Required Qualifications

7+ years of Engineering experience, or equivalent demonstrated through one or a combination of work or consulting experience, training, military experience, or education.
7+ years of Application Security or Information Security Engineering experience at enterprise scale.
Deep expertise in SSDLC controls, including threat modeling, secure design, SAST, SCA, DAST, and penetration testing.
Proven ability to define security strategy and deliver outcomes through influence and technical leadership.
Experience securing GenAI and LLM-based applications, including adversarial testing and prompt-injection defenses.
Experience designing AI-driven security automation or decisioning capabilities.
Strong understanding of DevSecOps and CI/CD security integration.
Experience working in highly regulated environments such as financial services.
Relevant security certifications (CISSP, CSSP, CISM, or equivalent).

Key Technologies

SSDDC, SDLC, SSAST, SCA, DAST, GenAI, LLM, DevSecOps, CI/CD, infrastructure-as-code

View full job page →

Application Security Strategy Engineer Jobs

Principal Product and Application Security Engineer / Founding Engineer

Principal Application Security Engineer

Get Application Security Strategy Engineer Jobs alerts