Shape secure-by-default software for Shield AI’s Hivemind Enterprise product while working at the intersection of application security, development, and CI/CD. This Senior Application Security Engineer role is based onsite in San Diego, CA and includes compensation in the range of $120,000 to $190,000 per year, with bonus, benefits, and equity.
What you will do
As part of the cybersecurity engineering team, you will help define and operationalize application security across Hivemind. Your work includes deploying and configuring security scanning tools inside CI/CD pipelines, reviewing scan outcomes, and collaborating directly with developers to identify and remediate security issues in code.
- Define application security policies for Hivemind
- Deploy and configure scanning tools within CI/CD
- Review scanning results and work with developers to fix security issues in application code
- Partner with the architecture team to reduce risk early in the process
- Perform threat modeling and validate designs against secure coding standards
What you bring
- Bachelor’s degree with approximately 5+ years of relevant experience, or Master’s degree with approximately 4+ years of relevant experience in cybersecurity, software engineering, or a closely related technical field
- Experience developing or testing cyber secure code
- Strong understanding of modern software engineering practices, including CI/CD, automated testing, configuration management, and software lifecycle processes
- Familiarity with threat modeling
- Experience with software analysis tools such as static analysis, dynamic analysis, dependency mapping, CVE scanning, and related tooling
- Comfortable working in a Linux development environment
- Strong organizational, communication, and cross-functional collaboration skills
- Basic understanding of key cryptography concepts
Tools and technologies
CI/CD, static analysis, dynamic analysis, dependency mapping, CVE scanning, Linux, cryptography.
Compensation and benefits
- $120,000 to $190,000 per year plus bonus, benefits, and equity
- A temporary benefits package (applicable after 60 days of employment)
Preferred qualifications
- Previous experience on an application security team for a large, complex software product
- Experience as a DevSecOps engineer, especially in a GitLab environment
- Experience writing software or testing Python, C/C++, and/or Go
- Red-teaming experience
- Software reverse engineering skills
