23 days ago
Base Salary
$145k - $207k/yr
Responsibilities
- Define and drive application and product security architecture, vision, strategy, and roadmap across Reltio’s cloud-native platform.
- Establish secure coding standards, shift-left practices, security tooling, and paved-road patterns across the SDLC.
- Design and implement CI/CD security controls, including SAST, SCA, DAST, secrets scanning, and secure deployment checks.
- Lead threat modeling, architecture reviews, technical risk assessments, and risk-based remediation prioritization.
- Analyze and validate application security findings from automated testing, API testing, penetration tests, and manual assessments.
- Guide secure API design and mitigate authentication, authorization, data exposure, rate-limiting, and OWASP API Top 10 risks.
- Define AI and agentic security guardrails for LLM applications, MCP servers, tools, and multi-agent workflows.
- Perform and oversee application, API, and AI/agent penetration testing, including prompt-injection and guardrail-bypass testing.
- Mentor application security engineers and development teams and provide secure-coding, API-security, and AI-security guidance.
- Investigate security events and incidents and support customer-facing security communications as needed.
Requirements
- 8+ years of experience in application security or software development, including significant experience in cloud-native or SaaS environments.
- Demonstrated senior individual-contributor technical leadership, including setting standards, leading cross-team initiatives, and influencing architecture without direct authority.
- Hands-on secure coding and modern application development experience, including leading secure code reviews.
- Strong understanding of cloud well-architected frameworks, application development, deployment workflows, OWASP Top 10, and OWASP API Top 10.
- Experience integrating application security into CI/CD and release management processes using tools such as Jenkins or Argo CD.
- Experience integrating SAST, SCA, and DAST into CI/CD pipelines and managing application security findings.
- Experience with AI security concepts including guardrails, prompt and output validation, data protection, and MCP security.
- Hands-on experience with Java, Java Spring Boot, JavaScript, Node.js, C#, modern UI frameworks, microservices, and cloud-native or serverless architectures.
- Experience with AWS, GCP, and/or Azure, containerized environments, and Kubernetes.
- Hands-on experience with Burp Suite Pro and modern application security platforms; Wiz is preferred.
- Preferred experience securing LLM applications and multi-agent systems, including NeMo Guardrails, AWS Bedrock Guardrails, and MCP gateway or tool security.
- Preferred experience with AppSec automation and orchestration, DefectDojo, Wiz Code, Veracode, Checkmarx, Cycode, or SonarQube.
- Preferred experience developing vulnerability-management or product-security programs and working with SOC 2, HITRUST, or ISO 27001.
- Relevant security or cloud certifications and experience applying ML/AI techniques to security detection, anomaly identification, or risk prioritization are preferred.
- Strong communication, presentation, collaboration, initiative, and risk-based consensus-building skills are required.
Benefits
- Flexible work arrangements supported by Reltio’s distributed-workforce model.
- Overall market base salary range of $145,000—$207,000 USD, varying by location, job family, background, skills, and experience.
Tech Stack
Categories
About Reltio
Reltio builds a cloud-native master data management platform that unifies, cleanses, and governs customer and other core data for large enterprises. Delivered as a SaaS subscription, the Reltio Data Cloud consolidates data across sources in real time to support analytics, operations, and AI use cases in industries such as life sciences, financial services, and healthcare. Founded in 2011 and headquartered in Redwood Shores, CA, it operates as a subsidiary of SAP.