Staff Application Security Engineer

This is a fully remote position, open to applicants in United States, +1 more country.

📋 Description

• Ensure the security of the Temporal development pipeline, products, and customer execution environments.

• Collaborate closely with software engineering teams and customers to incorporate security measures into the platform across various cloud environments.

• Develop production-ready, AI-assisted security workflows with suitable guardrails.

• Work alongside product and engineering teams to embed security principles into product design and architecture.

• Lead intricate threat modeling and risk assessments across the entire product surface.

• Drive security strategy, influence architectural decisions, and set the direction across multiple teams or organization-wide.

• Oversee the secure development pipeline, focusing on code security and third-party library supply-chain security.

• Keep abreast of emerging standards and guidelines, such as OWASP Top 10 for LLMs and MCP security specifications, and translate these into internal policies.

• Take responsibility for any disclosed vulnerabilities in Cloud and Open Source products.

• Participate in an on-call rotation.

⛳️ Requirements

• Bachelor’s degree in Computer Science, Cybersecurity, or a related discipline (or equivalent experience).

• 7+ years of experience in application or product security or a related position.

• Demonstrated collaboration with engineering teams, contributing security expertise to planning and development processes.

• Proficient in writing production-quality code in at least one programming language, with development experience that extends beyond basic scripting.

• Understanding of encryption, authentication, and secure communication protocols.

• Familiarity with SAST, DAST, and penetration testing frameworks.

• Strong grasp of application architecture and design principles.

• Capability to identify vulnerabilities across various programming languages.

• Exceptional communication skills, with the ability to explain complex security concepts to non-technical stakeholders.

• Experience in Kubernetes security posture management and auditing, including workload hardening, RBAC design, and admission control.

• Knowledge of multi-tenant security architecture, encompassing data plane isolation, control plane hardening, and prevention of cross-tenant data leakage.

🏝️ Benefits

• Equity.

• Remote work opportunities.

• AI-assisted interview recording and transcription; candidates can opt out without affecting their candidacy.

• Equal opportunity and reasonable accommodation support.

• Compensation is based on prior experience, knowledge, expertise, skillset, market location, and job level.