Senior Application Security Engineer
Instructure, Inc.2 days ago
Budapest, HungarySenior
Responsibilities
- Classify application security risks using exposure, data sensitivity, exploitability, blast radius, and business impact, and hand off residual risk for business decisions.
- Triage vulnerabilities, adjudicate severity, drive remediation with engineering teams, design compensating controls, and document false-positive decisions.
- Build and maintain CI/CD security gates, checks, application security tooling integrations, and related data pipelines.
- Lead threat modeling, secure code reviews, technical specification reviews, and secure-default library and pattern development.
- Own SAST and software composition analysis coverage, signal quality, and developer experience using Snyk, CodeQL, and Wiz Code.
- Provide developer enablement through training, documentation, office hours, and design consultation.
- Partner with product management and engineering leadership to communicate security risk and support prioritization.
- Assist with bug bounty researcher communication and triage, and provide subject-matter expertise during major security incident escalations.
Benefits
- Competitive compensation and participation in the employee ownership program.
- Flexible remote, hybrid, and in-office work arrangements depending on the role, team, and location.
- Generous time off, local holidays, and an annual late-December “Dim the Lights” period based on departmental needs.
- Wellness programs and mental health support.
- Learning and development resources, professional development tools, and tuition reimbursement.
- Technology and tools needed to perform the work.
- Motivosity employee recognition program.
- Inclusive culture focused on support and meaningful connection.
- Background check and identity verification are required as part of hiring.
Categories
About Instructure, Inc.
Instructure builds Canvas, a cloud learning management system, along with tools for assessment, video learning, credentials, and analytics for K–12, higher education, and corporate training. It sells these products as SaaS subscriptions with related services. Founded in 2008 and headquartered in Salt Lake City, the company trades on the NYSE and expanded its credentials offering by acquiring Parchment in 2024.