Staff Security Engineer – AppSec

6sense

. Mentor other Security Engineers, providing guidance and support .

Posted 11/12/2026full-timeRemote • United StatesLead💰 $200,947 - $255,722 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive expertise in application security, including threat modeling, vulnerability management, and automated security testing. Proficient in mentoring security engineers and collaborating with cross-functional teams to enhance security posture and implement best practices.

Highest-signal resume keywords

Application Security ExpertiseVulnerability ManagementAutomated Security TestingThreat ModelingSecurity Training

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Information SecurityThreat ModelingVulnerability ManagementAutomated Security TestingCode ReviewPythonJavaScriptSecurity Flaws RemediationSecurity ControlsSecurity Libraries

Soft Skills

Excellent Communication SkillsCollaborationProject ManagementInfluencing SkillsPrioritization

Tools & Technologies

Vulnerability ScannersSASTDASTDevOps SoftwareAWS Cloud Security Tooling

Certifications & Qualifications

AWSCNCFGIAC

Industry Keywords

NIST 800-218 SSDFOWASPSAFECodeCIS BenchmarksISO 27001SOC 2GDPRPCISOXNIST 800-53

Tech Stack

Tools & technologies

AWSCloudJavaScriptPythonTCP/IP

About the role

Key responsibilities & impact

Mentor other Security Engineers, providing guidance and support
Assist with Senior-level responsibilities when needed
Support and consult with engineering and product teams on application security vulnerabilities
Assist teams in reproducing, triaging, and addressing vulnerabilities identified through penetration testing, SAST, DAST, or dependency scans
Drive changes in the bug bounty program
Lead development of automated security testing to validate secure coding best practices
Lead application security reviews and threat modeling, including code review and dynamic testing
Lead and influence cross-functional changes across the Security organization
Own and evangelize security training with development teams
Drive initiatives that scale application security and address multiple vulnerabilities across functional areas
Design and execute quarterly (O)KRs
Maintain expert understanding of the 6sense product and platform
Identify security gaps and drive changes to improve security posture
Participate in weekly 1:1s with the manager and monthly skip levels
Implement security controls based on current threats, trends, and best practices
Manage vulnerabilities through remediation within targeted SLA or risk acceptance
Maintain inventory of security scope for 6sense products
Maintain up-to-date collateral, metrics, and processes
Report to the Manager, Security Engineering

Requirements

What you’ll need

8+ years of experience in information security, with a focus on all aspects of application security, including threat modeling, developer training, vulnerability management, automated security testing, and code reviews
Expert understanding and ability to explain common security flaws and ways to remediate them, such as OWASP Top 10
Expert-level understanding of network and web-related protocols, such as TCP/IP, UDP, HTTP, and HTTPS
Development or scripting experience and skills in Python or JavaScript
Excellent written and verbal communication skills, with ability to articulate complex topics clearly and concisely
Experience working directly with software developers to improve code security
Expert understanding and practical experience with common security libraries, security controls, and common security flaws
Experience with security tools, including vulnerability scanners, SAST/DAST, DevOps software, and AWS cloud security tooling
Strong knowledge of industry frameworks, regulations, and standards, including NIST 800-218 SSDF, OWASP, SAFECode, CIS benchmarks, ISO 27001, SOC 2, GDPR, PCI, SOX, and NIST 800-53
Bachelor's degree in a related field is preferred
Relevant industry certifications, such as AWS, CNCF, and GIAC, are highly desirable
Ability to work independently and manage multiple projects simultaneously
Ability to influence and collaborate with cross-functional teams
Ability to translate technical requirements into actionable and timebound requests
Ability to drive projects and tasks to completion
Ability to maintain accuracy of information
Ability to rapidly and effectively prioritize and escalate

Benefits

Comp & perks

Bonus program or commission plan may be included
Stock options if approved by 6sense’s board
Generous health insurance coverage
Life insurance
Disability insurance
401K employer matching program
Paid holidays
Self-care days
Paid time off (PTO)
Paid parental leave
Equipment and support for working and connecting with teams at home or in offices
Learning and development initiatives
Access to LinkedIn Learning
Quarterly wellness education sessions
Wellness days
ERG-hosted events