Staff Application Security Engineer

Job not on LinkedIn

🕒 July 31

🌐 United States, Canada – Remote

🇺🇸 United States – Remote 🇨🇦 Canada – Remote

💵 $172k - $216k / year

⏰ Full Time

🔴 Lead

💻 Application Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 4%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Censys

WebsiteLinkedInAll Job Openings

51 - 200 employees

Founded 2017

🔒 Cybersecurity

🏢 Enterprise

Cybersecurity • Enterprise • Data

Censys is a leading Internet Intelligence Platform that specializes in Threat Hunting and Attack Surface Management. It provides security teams with a comprehensive, accurate, and up-to-date map of the internet to defend against attacks and hunt for threats. Censys offers solutions for Cloud Asset Discovery, Exposure and Risk Management, and External Attack Surface Management. Its proprietary Internet Map delivers detailed insights and extensive internet scanning capabilities, allowing organizations to continuously monitor internal and external attack surfaces. Founded by the creators of ZMap at the University of Michigan, Censys is deeply rooted in the security open source community and boasts a large internet intelligence community. Censys empowers organizations, including those in financial services, government, and healthcare, to act swiftly against evolving threats and protect their internet-facing assets effectively.

📋 Description

• Own and drive the AppSec/DevSecOps program roadmap across engineering, defining the strategy for embedding security into the SDLC through shift-left practices, paved roads, and automation rather than gates • Design, build, and maintain DevSecOps tooling in Kubernetes and Google Cloud Platform (GCP), including support for AI/ML workloads • Lead the integration of security into CI/CD pipelines — code scanning, secret detection, software composition analysis, and infrastructure policy enforcement — partnering with engineering teams to adopt them without friction • Deliver capabilities such as hardened service templates, secure service catalogs, and guardrails that reduce developer cognitive load and risk across the organization • Set the security architecture direction for AI/ML workflows, implementing controls around model training, deployment, and inference pipelines, including access control, artifact validation, input/output sanitization, and model provenance tracking • Partner with CorpSec on company security and compliance initiatives, owning the engineering side of the requirements by designing and implementing controls for SOC 2 and ISO27001 audit readiness, as well as improving tooling around BCDR, infrastructure policies, and service inventory accuracy • Provide technical leadership and mentorship, raising the security bar through design reviews, threat modeling, and pragmatic guidance to engineers across all teams • Participate in a shared on-call rotation with the Infrastructure and SRE teams, supporting production uptime and security incident response readiness

🎯 Requirements

• 10+ years of experience in Security Engineering, DevSecOps, SRE, or related roles • Deep expertise securing Kubernetes environments, including container images, network policies, and supply chain protections (e.g., Helm, Crossplane) • Strong experience with Application Security tooling — dependency scanning, static analysis, and policy enforcement — integrated into CI/CD pipelines such as GitHub Actions and ArgoCD • Strong understanding of attacker tactics, techniques, and procedures (TTPs), and familiarity with frameworks like MITRE ATT&CK • Strong grasp of cloud services (GCP preferred), especially securing data pipelines, model hosting endpoints, and related infrastructure • Proficiency with Infrastructure-as-Code (Terraform, Crossplane, or similar) and security scanning for cloud resources • Proficiency with scripting and automation (e.g., Python, Bash) • Strong communication skills and empathy for developer needs, with a demonstrated ability to embed secure practices without creating friction.

🏖️ Benefits

• equity • health, dental & vision coverage • retirement with company contribution • parental leave • mental health & wellness benefits • flexible PTO • professional development stipend • sales incentive pay for sales roles • annual bonus plan for eligible non-sales roles