Staff Application Security Engineer
Engine · Remote - US
About the role
Staff security engineer at Engine who is a primary owner of the security of the company's applications and software, building the vulnerability management pipeline and running the application security programme. Remote in the US.
The engineer reviews architecture, code and infrastructure configuration, does light penetration testing of web and mobile apps, maintains vulnerability scanning in the container delivery pipeline, owns SIEM configuration and alerting, takes a key part in incident response and forensics, builds security tooling and guidelines for engineers, and helps run security training. Engine wants strong coding in a language such as Ruby, Java or Python, SIEM management experience, Docker and Kubernetes knowledge, mastery of SAST, DAST and IAST with manual validation, OWASP Top 10 depth, and SOC 2 or PCI familiarity. Applications are accepted through November 20, 2026.