Security Engineer - Application Security (Senior)
Cogent Security2 months ago
Base Salary
$100k - $300k/yr
Responsibilities
- Embed security into the software development lifecycle through threat modeling, secure design reviews, and adopted secure-coding guidance.
- Own application security testing, including code review, SAST/DAST, triage, and driving findings through remediation.
- Harden the software supply chain through dependency verification, safe dependency management, and CI/CD pipeline security.
- Build and automate security tooling and guardrails that scale with engineering.
- Serve as the internal security subject-matter expert and early security user for product and workflow decisions.
- Partner across teams on architecture and design to make security a default part of development.
Requirements
- Require 5+ years of extensive security engineering experience in product or application security.
- Require strong hands-on engineering skills and the ability to ship and automate rather than only manage process.
- Require strong software engineering skills and comfort working across the stack with Python, Go, TypeScript, or similar languages.
- Require depth in secure SDLC, threat modeling, code scanning, and software supply-chain or dependency security.
- Require fluency with the modern AI landscape and its effect on security.
- Value strategic judgment, hands-on execution, high ownership, and comfort with ambiguity as an early security hire.
- Bonus: experience securing AI/ML products or agentic systems.
- Bonus: experience with developer-enablement or security-champions programs.
- Bonus: experience as an early security hire or building an AppSec function from scratch.
Benefits
- California-based applicants are offered a stated standard base salary range of $100,000-$300,000 annually.
- Certain roles may be eligible for variable compensation, equity, and benefits.
Tech Stack
Categories
About Cogent Security
Cogent Security builds AI-native vulnerability management software for enterprise security teams, using autonomous agents to analyze large-scale environment data and prioritize and remediate risk. The privately held company, founded in 2024 and headquartered in San Francisco, partners with Fortune 500 organizations and is backed by Greylock Partners. Its model centers on selling an enterprise platform and post-sales solutions that deploy at production scale.