Application Security Engineer

Role Overview

The primary goal of the Information Security team is to earn deep trust with our rapidly growing customer base by relentlessly safeguarding Sonar products and the supporting cloud platforms, while consistently demonstrating that Sonar meets demanding, industry‐leading security standards.

What You Will Do

Shape secure products and cloud architecture, lead security assurance and improvement, strengthen customer trust and incident readiness, anticipate threats and scale the security program.

Why It Might Be a Fit

We are looking for an experienced Application Security Engineer who can champion security by design, partner with product and engineering teams, and deliver high-impact initiatives from the strategic security plan.

Requirements

• Extensive experience with application and cloud architectures, predominantly AWS
• Experience conducting application security assessments, including code review and evaluation of authentication and authorization designs
• Experience assessing and securing AI and agentic AI capabilities
• Experience applying threat-modeling approaches, such as STRIDE
• Experience with penetration testing, red-team engagements, and bug-bounty programs
• Practical experience using AI to automate repeatable security work

Benefits

• Competitive salary
• Stock options
• Health insurance
• Dental insurance
• Vision insurance
• Paid time off
• Retirement plan
• Learning budget
• Parental leave
• Wellness programs
• Visa sponsorship available