Staff Application Security Engineer

🕒 August 13

🗽 New York – Remote

🗽 New York – Remote

💵 $120k - $145k / year

⏰ Full Time

🔴 Lead

💻 Application Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 13%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

NBCUniversal

WebsiteLinkedInAll Job Openings

10,000+ employees

Founded 2004

📱 Media

Media • Entertainment

NBCUniversal is a leading global media and entertainment company known for creating and distributing content across a variety of platforms. With over 100 years of experience, it is a part of Comcast and encompasses brands like Peacock, NBC Sports, and many others to educate, entertain, and empower audiences around the world. The company is involved in television broadcasting, film production, and theme parks, and is also recognized for its initiatives in technology and corporate social responsibility. NBCUniversal is committed to innovation and social impact, making it a vibrant workplace for media and tech professionals.

📋 Description

• Design, build, and improve application security capabilities supporting secure software development across NBCUniversal • Build reusable security automations, integrations, APIs, workflows, and developer tools • Implement secure-by-default golden paths, paved roads, and engineering patterns • Design and implement scalable security solutions across source code, open source dependencies, containers, cloud-native applications, CI/CD pipelines, infrastructure as code, developer platforms, and software supply chains • Partner with Cloud Security on application and cloud security capabilities • Improve vulnerability prioritization, triage, remediation, validation, reporting, and speed to remediation • Build security patterns and guardrails for AI-assisted development tools, coding assistants, and agentic workflows • Use automation and AI-enabled techniques to improve vulnerability triage, remediation planning, developer guidance, and workflow efficiency • Build integrations between application security platforms, GitHub, CI/CD systems, developer portals, ticketing systems, reporting platforms, and other engineering tools • Create telemetry, dashboards, and reporting pipelines for application risk, coverage, and remediation progress • Serve as a senior technical expert in application security engineering, secure software development, software supply chain security, and secure AI development • Partner with architects, platform engineers, cloud security engineers, and development teams to implement technical solutions • Mentor engineers and improve engineering practices, automation skills, and technical depth

🎯 Requirements

• 8+ years of experience in Application Security, Security Engineering, DevSecOps, Software Engineering, or a related technical field • Deep experience with secure software development, application security, vulnerability management, and software supply chain security • Hands-on experience building security automations, integrations, APIs, platforms, developer tooling, or similar engineering solutions • Strong software engineering and scripting skills using Python or similar languages • Hands-on experience integrating SAST, SCA, secrets detection, container security, CI/CD security, and vulnerability management into developer workflows • Ability to solve complex, ambiguous technical problems and influence adoption through implementation, documentation, and collaboration • Familiarity with AI-assisted development, agentic workflows, and related security considerations • Experience with Snyk, Wiz Code, GitHub Advanced Security, Checkmarx, Veracode, or similar application security platforms • Experience building secure developer platforms, internal tools, paved roads, golden paths, or reusable engineering services • Experience across AppSec and CloudSec domains, including cloud-native architectures, containers, Kubernetes, infrastructure as code, CI/CD security, CSPM, CNAPP, or related technologies • Experience with software supply chain security, SBOM capabilities, dependency risk workflows, or artifact security processes • Experience using AI to improve vulnerability management, remediation workflows, security operations, or developer productivity

🏖️ Benefits

• Company sponsored medical insurance • Dental insurance • Vision insurance • 401(k) • Paid leave • Tuition reimbursement • A variety of other discounts and perks • Bonus eligible