Application Security Engineer

Job not on LinkedIn

🔥 1 minute ago

🇺🇸 United States – Remote

💵 $172k - $261.9k / year

⏰ Full Time

🟡 Mid-level

🟠 Senior

💻 Application Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 0%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.Why this score:

• Just posted.
• Jobs at this company usually fill in 39 days.

Apply Now

Find Similar Remote Jobs

Dropbox

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

Founded 2007

💼 Consulting

🏭 Manufacturing

📦 Logistics

Consulting • Manufacturing • Logistics

Dropbox is a cloud-based service that provides tools for storing, sharing, and accessing files across devices. It offers features such as document sharing, video review, automatic backups, and AI-driven scheduling. Dropbox also provides solutions for different sectors like teams, sales, marketing, and education, and industries including construction, media, technology, and manufacturing. With a focus on security, Dropbox ensures files are encrypted and protected against tampering. It offers integrations with various productivity tools and is trusted by major companies for efficient file management and collaboration.

📋 Description

• Build and maintain security tools, automation, and libraries to enable secure-by-default development across engineering teams • Design and implement custom security rules, such as Semgrep and CodeQL, to detect and prevent common and emerging vulnerability patterns • Act as a subject matter expert on application security across web, mobile, and desktop environments • Improve and scale the Secure Development Lifecycle (SDLC) by integrating tools, checks, and processes into engineering workflows • Perform targeted code reviews and develop follow-up tooling or controls to prevent regressions • Collaborate cross-functionally with engineering, product, GRC, and AI/ML teams to proactively address security risks • Participate in security on-call rotations when applicable • Support teams through threat modeling, documentation, and security education

🎯 Requirements

• 4+ years of experience in application security or security engineering roles • Hands-on experience building or using security automation tools to improve developer workflows and product security • Demonstrated ability to work across the SDLC, including supporting and interpreting findings from penetration tests and bug bounty reports • Familiarity with modern tech stacks, including microservices, CI/CD pipelines, and cloud-native environments • Solid understanding of common vulnerability classes, including injection, XSS, and authN/authZ issues, and practical mitigation strategies • Comfortable working in cross-functional environments and supporting multiple product and engineering teams simultaneously • Experience participating in or supporting incident response or security on-call rotations is a plus • Experience in application security engineering, with a strong focus on security tooling and automation • Demonstrated ability to write and maintain custom security rules and integrate them into developer workflows • Experience with machine learning systems, particularly generative AI, and secure development in AI-driven products • Experience developing internal libraries or frameworks that reduce or eliminate entire classes of vulnerabilities • Proficient in software development, with production-level code contributions in one or more modern languages • Familiarity with securing web, mobile, and native platforms • Experience with data security, including data protection, access control, and encryption tooling • Strong communication skills and ability to build trusted partnerships with cross-functional teams

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume