Sr Application Security Engineer
The Trade Desk2 months ago
Base Salary
$114k - $208k/yr
Responsibilities
- Own and extend scalable application security tooling for SAST/DAST pipeline integration, vulnerability management, threat modeling, and security posture.
- Triage, reproduce, and contextualize scanner findings so engineering teams understand remediation needs, risk, and potential customer impact.
- Review new features, APIs, and architectural changes; conduct security-focused code reviews and application-layer penetration tests.
- Write production-quality security automation and tooling alongside security guidance.
- Assess and secure AI/ML systems, including inference APIs, LLM integrations, prompt injection, and model exfiltration risks.
- Build AI-augmented security tooling to scale team output.
- Partner with engineers on secure-by-design patterns and raise the security baseline across hundreds of engineers.
- Develop and publish security standards, guidelines, procedures, secure baselines, and policies.
Requirements
- BS degree in a related field or equivalent years of experience.
- 6–8+ years of application security experience, including building tooling and automation.
- Current software development experience writing production-ready code in at least one of C#, Java, Python, Go, or JavaScript.
- Hands-on experience configuring, tuning, and integrating SAST, DAST, SCA, and secrets management tools with CI/CD pipelines.
- Practical threat modeling experience using STRIDE, PASTA, or an equivalent approach.
- Experience with vulnerability management, including aggregation, triage, risk-based prioritization, and remediation at scale.
- Working knowledge of Kubernetes and container security with Docker, Helm, and Istio.
- Cloud security fundamentals across at least one of AWS, GCP, or Azure.
- Experience securing AI/ML pipelines, LLM integrations, generative AI attack surfaces, or AI-assisted security tooling.
- Strong written and verbal communication skills.
- OSWE, GWAPT, CSSLP, OSCP, or cloud security certifications are preferred.
- Experience in ad tech, large-scale SaaS, or high-throughput consumer or enterprise platforms is preferred.
Benefits
- Comprehensive medical, dental, and vision healthcare with premiums fully paid for employees and dependents.
- 401(k) retirement plan with company match, disability coverage, basic life insurance, well-being benefits, tuition reimbursement, parental leave, sick time, vacation, and approximately 13 paid holidays per year.
- Employee Stock Purchase Plan with discounted company stock.
- Base compensation range is $113,500–$208,100 USD.
- The posting does not state a work arrangement or contract duration.