Senior Software Engineer, Application Security

Description

The company is the company, an intelligent content management provider with offices in Redwood City, CA, across the United States, Europe, and Asia. Founded in 2005, it serves large global organizations such as JLL, Morgan Stanley, and Nationwide.

The Application Security Engineering team builds production-grade systems, services, and automation that guard the company against attackers, vulnerabilities, and abuse. The team is hiring a software engineer who wants to use engineering to solve security problems in code. You will design, build, deploy, and run security services and paved-road guardrails inside the company's products, infrastructure, and software development lifecycle.

Responsibilities

• Design, build, and run production-grade security services, features, and internal tools that protect the company and its customers.
• Build end-to-end applications and backend services on modern data stores, application frameworks, and scalable architectures.
• Create systems and automation that detect, prevent, and reduce security threats at scale.
• Develop paved-road frameworks, libraries, and guardrails so that secure development is easy and the default for every engineer.
• Build security automation and verification controls into the company's CI/CD pipelines.
• Design and implement AI security controls, evaluation frameworks, and automated protections across product areas.
• Work closely with Product and Engineering to turn hard security problems into clean, scalable software.

Requirements

• Use AI in your daily work with a growth mindset to make faster, sharper decisions and multiply your impact.
• 4+ years of professional software development experience in Java, Python, PHP, Go, Scala, or similar languages.
• A proven record of building end-to-end applications, with solid experience in databases, modern frameworks, and API design.
• Strong grounding in object-oriented and functional design, system architecture, automated testing, reliability, and code quality.
• A foundational understanding of security concepts and a real interest in solving security problems through software. Deep security expertise is not required, as the company will help you build it.
• Ability to break complex technical problems into clean, scalable, maintainable systems.
• Strong analytical, problem-solving, communication, and cross-functional collaboration skills.
• Bachelor's degree in Computer Science, a related technical field, or equivalent practical experience.
• Preferred:
• Experience or familiarity with distributed systems, microservices, or message queues such as Kafka, RabbitMQ, or SQS.
• Experience with Java Spring or Spring Boot.
• Familiarity with AWS, GCP, or Azure, and with Infrastructure as Code such as Terraform.
• Familiarity with AI/ML systems, LLMs, or AI application security.
• Work from your assigned office at least 3 days per week. Your recruiter will explain how the team works and the company culture during hiring.
• The company welcomes diverse backgrounds. If you are excited about the role but do not meet every requirement, you are encouraged to apply.

Conditions

Office-based: work from your assigned office a minimum of 3 days per week.

The recruiter will walk you through working arrangements and culture during the hiring process.

The company welcomes applicants from all backgrounds and encourages you to apply even if you do not meet every requirement.