Senior Application Security Engineer
Temporal Technologies7 months ago
Base Salary
$144k - $236k/yr
Responsibilities
- Partner with product and engineering teams to integrate security principles into product design and architecture.
- Conduct threat modeling and risk assessments across the full product surface.
- Manage the secure development pipeline, including code security and third-party library supply chain security.
- Translate emerging guidance such as OWASP Top 10 for LLMs and MCP security specifications into internal policy.
- Triage bug bounty findings and responsibly disclosed vulnerabilities.
- Support Kubernetes security posture management and auditing, including workload hardening, RBAC design, and admission control.
- Develop and assess multi-tenant security architecture, including data plane isolation, control plane hardening, and cross-tenant data leakage prevention.
- Participate in an on-call rotation.
Requirements
- Bachelor’s degree in Computer Science, Cybersecurity, or a related field, or equivalent experience.
- At least five years of experience in application security, product security, or a related role.
- Experience partnering with engineering teams to incorporate security into planning and development.
- Knowledge of encryption, authentication, and secure communication protocols.
- Familiarity with SAST, DAST, and penetration testing frameworks.
- Strong understanding of application architecture and design principles, with the ability to identify vulnerabilities across multiple programming languages.
- Experience with Kubernetes security posture management, workload hardening, RBAC design, and admission control.
- Experience with multi-tenant security architecture and prevention of cross-tenant data leakage.
- Expertise in at least one programming language and familiarity with Python and Go.
- Strong communication and collaboration skills, including the ability to explain complex security concepts to non-technical stakeholders.
- Preferred qualifications include distributed computing vulnerability experience, running a Security Champions program, open-source automation projects, additional security expertise, and security conference talks or published research.
Tech Stack
Categories
About Temporal Technologies
Temporal Technologies builds an open-source durable workflow platform that software teams use to orchestrate long-running, stateful application logic across services. It monetizes through a managed cloud offering and commercial support for its server and SDKs. Founded in 2019 and headquartered in Bellevue, Washington, it lists public adopters such as Netflix, Snap, Indeed, and Datadog.