Senior Application Security Engineer

Job not on LinkedIn

🔥 0 minutes ago

🇮🇳 India – Remote

⏰ Full Time

🟠 Senior

💻 Application Engineer

👻 Ghost score 11%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

One Identity

WebsiteLinkedInAll Job Openings

501 - 1000 employees

🔒 Cybersecurity

☁️ SaaS

🏢 Enterprise

💰 $3M Venture Round on 2004-07

Cybersecurity • SaaS • Enterprise

One Identity is a company that specializes in identity and access management solutions, focusing on protecting digital identities and simplifying user access across organizations. They offer a comprehensive suite of products designed to secure privileged access, govern user identities, and streamline compliance with regulations through automation. Their platform integrates AI-driven insights to enhance security and operational efficiency, supporting both on-premises and cloud environments.

📋 Description

• Threat model authentication and session handling, privilege elevation paths, connector and integration boundaries, tenant isolation, cryptographic handling, and secrets handling • Set security requirements during architecture and design stages • Advise product and engineering leadership on risk acceptance and release decisions • Submit, review, and implement security fixes in product repositories with commit access • Own static analysis, dependency scanning, and dynamic testing across product lines • Tune security tooling and route findings to responsible engineering teams • Improve secure coding practices across .NET and Java codebases through patterns, libraries, reference implementations, and code review • Define review and automated remediation practices for AI-generated code • Own product vulnerability response from intake through triage, coordinated disclosure, CVE handling, and customer advisories • Convert penetration testing and bug bounty findings into fixes and systemic improvements • Own software composition analysis and SBOM generation, including license and provenance data • Produce product security evidence for customer questionnaires, security reviews, and certification work • Work across every product line as the security representative embedded in engineering

🎯 Requirements

• Six or more years in software engineering or security, with at least three focused on application or product security • Equivalent depth counts • Application security experience on a product that customers deploy and operate themselves • Code-level fluency in C# and .NET, with sufficient range to work in a Java codebase • Ability to read and write production code • Hands-on work with AI-assisted development or AI-enabled security tooling within the last six months • Considered view on the use of AI in the security review pipeline • Experience with threat modeling at design time • Experience with static, dynamic, and software composition analysis tooling • Knowledge of identity and authentication protocols including OAuth, OIDC, SAML, and SCIM • Experience with coordinated vulnerability disclosure and CVE handling • Secure code review experience across web and API surfaces • SBOM standards and license compliance knowledge helpful • Cryptographic review experience helpful • Security champions program experience helpful • PCI DSS or FedRAMP experience applied to a product helpful • Prior product engineering experience helpful

🏖️ Benefits

• Health and wellness programs • Career development and learning opportunities • Equal employment opportunity and non-discrimination workplace