Senior Cloud & Application Security Engineer

AXON-Networks is hiring a hands-on Senior Cloud & Application Security Engineer to strengthen AXON’s cloud-native platforms from within the Information Security organization. In this onsite role in Irvine, CA, you will partner with engineering and operations teams to improve application security, DevSecOps practices, vulnerability management, and security validation across cloud and Kubernetes environments.

Key Responsibilities

• Collaborate with development teams to enhance secure coding and application security practices.
• Review security findings from SAST, SCA, dependency scanning, container scanning, secret detection, and other security tooling.
• Assess exploitability, exposure, severity, and appropriate remediation for security findings.
• Conduct targeted manual reviews of applications, APIs, and services.
• Participate in application and architecture threat modeling.
• Define secure API design and input validation requirements.
• Review security-sensitive functionality including authentication, authorization, session management, cryptography, and secrets handling.
• Support penetration testing and validate remediation of penetration test findings.
• Integrate and improve security controls in CI/CD pipelines, including security gates and automated security testing.
• Improve source code, dependency, container, and artifact security, including artifact integrity, signing, provenance, and software supply chain controls.
• Evaluate build and deployment workflows for security weaknesses while balancing security controls with development efficiency.
• Assess Kubernetes clusters, workloads, cloud environments, and supporting infrastructure for security weaknesses.
• Review identity and access management configurations and network security including segmentation, ingress/egress controls, workload identities, and service-to-service access.
• Review container security, runtime configuration, secrets management, and image security.
• Support implementation and validation of cloud security baselines and review infrastructure-as-code for security issues.
• Partner with Cloud Operations and Platform Engineering on secure architecture.
• Perform technical analysis of vulnerabilities affecting AXON software, infrastructure, containers, dependencies, and services.
• Evaluate newly disclosed CVEs for applicability and exposure, assist with vulnerability triage, and validate remediation where appropriate.
• Differentiate theoretical scanner findings from meaningful, exploitable risk; document findings and remediation recommendations.
• Contribute to design and architecture reviews and help identify risks early in the system design lifecycle.
• Recommend practical technical controls and architectural improvements, and review new technologies, platforms, integrations, and services for security implications.
• Maintain approved security patterns and reference architectures and perform targeted security testing across applications, APIs, cloud services, infrastructure, and configurations.
• Develop repeatable security validation procedures and automation where appropriate, coordinate with external penetration testing providers, and reproduce findings to verify fixes.
• Assist teams with security-focused test cases and support technical investigation of suspected security incidents.
• Review logs, cloud events, authentication activity, network activity, and supporting evidence to improve security telemetry and detection capabilities.
• Participate in incident response exercises and post-incident reviews, and provide technical guidance and mentorship to Security Champions.
• Develop technical security training for Engineering and Operations teams and support Security Champion Council meetings.
• Promote reusable secure engineering patterns and help Champions evaluate findings within their teams.

Requirements

• 5+ years of experience in application security, cloud security, security engineering, DevSecOps, penetration testing, platform engineering, or a related technical role.
• Strong knowledge of cloud-native application architectures.
• Strong practical knowledge of Kubernetes and containers.
• Understanding of CI/CD pipelines and modern software development workflows.
• Experience with application security testing tools including SAST, SCA, container scanning, dependency scanning, and secret detection.
• Strong understanding of common application vulnerabilities and secure coding practices.
• Experience evaluating REST APIs, service-to-service communications, authentication, authorization, and secrets handling.
• Experience with at least one major public cloud platform.
• Ability to analyze vulnerabilities and determine realistic exploitability and impact.
• Ability to communicate effectively with developers and infrastructure engineers.

Technologies

• Go, Java, Python, C/C++
• GitLab Ultimate
• Terraform, Helm, Kubernetes operators
• Azure, GCP, OCI
• OCI, service meshes, gRPC, message buses, microservice architectures
• OWASP ASVS, OWASP Top 10, CWE, CVSS, EPSS, KEV
• Burp Suite, Nmap, Semgrep, Trivy
• OSCP, CSSLP, CCSP, GIAC
• Kubernetes security certifications
• SAST, SCA, dependency scanning, container scanning, secret detection
• CI/CD pipelines, Kubernetes, containers, REST APIs

Preferred Qualifications

• Experience with Go, Java, Python, C/C++, or other languages used in cloud-native environments.
• Experience with GitLab Ultimate security functionality.
• Experience with Terraform, Helm, Kubernetes operators, or infrastructure-as-code.
• Experience with Azure, GCP, or OCI.
• Familiarity with service meshes, gRPC, message buses, distributed systems, and microservice architectures.
• Familiarity with OWASP ASVS, OWASP Top 10, CWE, CVSS, EPSS, KEV, and related vulnerability frameworks.
• Experience with security testing tools such as Burp Suite, Nmap, Semgrep, Trivy, or equivalent tools.
• Relevant certifications such as OSCP, CSSLP, CCSP, GIAC, Kubernetes security certifications, or equivalent practical experience.

Location and Visa Sponsorship

• Primary location: Irvine, CA 92618 (onsite)
• Local candidates are primarily intended; remote US-based candidates may be considered.
• No visa sponsorship is available for this role.

Salary Range

USD 150,000 - 220,000 per year