Senior Security Engineer, Product AppSec

This is a fully remote position, open to applicants in Texas.

📋 Description

• Assess, implement, integrate, and enhance security tools — including SAST, DAST, SCA, IAST, container scanning, SBOM generation, secrets detection, and API security testing — throughout CI/CD pipelines and developer workflows.

• Create automated processes for vulnerability ingestion, prioritization, remediation tracking, and reporting, collaborating with platforms such as GitHub Actions, Azure DevOps, Jenkins, Jira, and SIEM tools.

• Lead enterprise vulnerability management initiatives, encompassing prioritization frameworks, SLA tracking, remediation velocity enhancements, and security posture dashboards.

• Incorporate security-by-design principles into the Software Development Life Cycle (SDLC), developing security guardrails and policy-as-code capabilities for cloud and application environments.

• Collaborate with DevOps and CI/CD teams to enhance automated security validation, release governance, and software supply chain security.

• Act as a senior technical advisor on application security, guiding engineering and product roadmaps to bolster platform security and operational resilience.

• Coach engineers and security professionals on secure development and DevSecOps best practices.

⛳️ Requirements

• Over 8 years of experience in Application Security, Product Security, DevSecOps, or Security Engineering.

• More than 3 years of hands-on experience with SAST, DAST, SCA, and IAST tools integrated into CI/CD pipelines.

• At least 3 years in vulnerability management, including triage, risk assessment, and remediation coordination across engineering teams.

• Extensive experience with Secure SDLC, threat modeling, and software supply chain security.

• Proficiency in building API integrations and automating workflows across security platforms.

• Bachelor's degree in Computer Science, Engineering, or an equivalent field of study.

🏝️ Benefits

• Unlimited paid time off, 12 paid holidays including 4 global VeeaMe Days for self-care, and 24 paid volunteer hours annually through Veeam Cares.

• Paid parental leave: 8 weeks for all parents, 16 weeks for birthing parents.

• Medical, dental, and vision coverage starting on your first day.

• Mental health support, therapy sessions, and digital wellness tools via our Employee Assistance Program.

• 401(k) retirement plan with company matching contributions.

• Fertility, adoption, and surrogacy support through Maven, along with paid volunteer time.

• AirVet: 24/7 virtual veterinary care at no cost.

• Legal services, identity protection, and supplemental health insurance options.

• Tax-advantaged spending accounts for healthcare, dependent care, and commuting.

• Opportunities to learn and grow through on-demand libraries (LinkedIn Learning, O’Reilly), mentoring, workshops, and learning events like our annual Global Day of Learning.