Senior Security Engineer, Application Security

Angi

. Own security initiatives end to end across cloud infrastructure hardening and application security .

Posted 11/9/2026full-timeRemote • United StatesSenior💰 $150,000 - $225,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive experience in security engineering with a focus on application security, cloud infrastructure security, and compliance frameworks such as PCI DSS. Proficient in mentoring engineers, driving security architecture, and integrating AI-driven tooling into security workflows.

Highest-signal resume keywords

Security EngineeringApplication SecurityCloud Infrastructure SecurityAWSInfrastructure-As-Code

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

KotlinNextJSPythonRubyScalaSwiftOWASP Top 10OAuthOIDCSAML

Soft Skills

Strong Written CommunicationMentoring

Tools & Technologies

TerraformCloudFormationSnykVeracodeFortifyQualysTenableRapid7BurpSuiteOWASP ZAP

Industry Keywords

Compliance FrameworksPCI DSSSOXIncident ResponseThreat Modeling

Tech Stack

Tools & technologies

AWSCloudKotlinKubernetesNext.jsPythonRubyScalaSwiftTerraform

About the role

Key responsibilities & impact

Own security initiatives end to end across cloud infrastructure hardening and application security
Own technical controls retained by InfoSec within compliance frameworks such as PCI DSS
Deploy and tune infrastructure protecting applications from exploitation, account takeover, and denial of service
Drive security architecture and threat modeling for AI agent products
Review RFCs, PRDs, and MRs from a security perspective and partner with product and engineering teams
Build tooling and frameworks that make secure development easier for engineers
Mentor engineers and improve recurring incident patterns, tooling gaps, and process debt
Participate in the incident response lifecycle through a 24/7 on-call rotation
Evaluate and integrate AI-driven tooling into InfoSec workflows

Requirements

What you’ll need

5+ years in security engineering, spanning at least two of: application security, cloud/infrastructure security, or enterprise security
Hands-on experience with AWS and infrastructure-as-code, including Terraform, CloudFormation, or equivalent
Comfortable reading and contributing to product service code; Kotlin, NextJS, Python, Ruby, Scala, or Swift preferred
Sound build-versus-buy judgment
Fluent in the OWASP Top 10 and its remediation
Knowledge of OAuth, OIDC, and SAML authentication and authorization standards
Exposure to LLM/agentic system security, including prompt injection, agent identity, and data exfiltration via AI systems
Daily, fluent use of AI-assisted coding/security tools, with ability to direct and verify AI output
Strong written communication for threat models and written design-document and merge-request feedback
Comfort executing the technical side of compliance frameworks such as PCI or SOX; vulnerability scanning, control reviews, and tamper detection preferred
Hands-on experience with static analysis tools such as Snyk, Veracode, or Fortify; infrastructure vulnerability scanning tools such as Qualys, Tenable, or Rapid7; and penetration testing tools such as BurpSuite or OWASP ZAP preferred
Container and Kubernetes experience preferred

Benefits

Comp & perks

Competitive year end performance bonus
Equity package
Full medical, dental, vision package
Flexible vacation policy
Pet discount plans
Retirement plan with company match (401K)