Apply

Ready to go for it?

AI Apply speeds things up—apply directly if you prefer.

FREE ACCESS
5,000–10,000 jobs/day
Scoutfield Logo

See all jobs on Scoutfield

Search thousands of fresh jobs every day.

Discover
  • Fresh listings
  • Fast filters
  • No subscription required
Create a free account and start exploring right away.
Dropbox

Application Security Engineer

Dropbox

. Build and maintain security tools, automation, and libraries to enable secure-by-default development across engineering teams .

Posted 11/12/2026full-timeRemote • United StatesMid-LevelSenior💰 $172,000 - $261,900 per yearWebsite

Core Competencies

Role fit
Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in application security, focusing on building and maintaining security tools and automation to enhance secure development practices. Proficient in integrating security measures throughout the Secure Development Lifecycle (SDLC) while collaborating effectively with cross-functional teams.

Highest-signal resume keywords
Application Security EngineeringSecurity Automation ToolsCustom Security Rules DevelopmentSecure Development Lifecycle (SDLC)Cross-Functional Collaboration

ATS Keywords

Tailor your resume
Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills
Security Tool DevelopmentVulnerability DetectionPenetration TestingBug Bounty ReportingInjection MitigationXSS MitigationAuthN/AuthZ IssuesSoftware DevelopmentMachine Learning SystemsData Security
Soft Skills
Strong Communication SkillsBuilding Trusted Partnerships
Tools & Technologies
SemgrepCodeQLCI/CD PipelinesCloud-Native EnvironmentsThreat ModelingSecurity Documentation
Industry Keywords
Secure DevelopmentCross-Functional EnvironmentsIncident ResponseSecurity On-Call RotationsData ProtectionAccess ControlEncryption Tooling

Tech Stack

Tools & technologies
CloudMicroservicesSDLC

About the role

Key responsibilities & impact
  • Build and maintain security tools, automation, and libraries to enable secure-by-default development across engineering teams
  • Design and implement custom security rules, such as Semgrep and CodeQL, to detect and prevent common and emerging vulnerability patterns
  • Act as a subject matter expert on application security across web, mobile, and desktop environments
  • Improve and scale the Secure Development Lifecycle (SDLC) by integrating tools, checks, and processes into engineering workflows
  • Perform targeted code reviews and develop follow-up tooling or controls to prevent regressions
  • Collaborate cross-functionally with engineering, product, GRC, and AI/ML teams to proactively address security risks
  • Participate in security on-call rotations when applicable
  • Support teams through threat modeling, documentation, and security education

Requirements

What you’ll need
  • 4+ years of experience in application security or security engineering roles
  • Hands-on experience building or using security automation tools to improve developer workflows and product security
  • Demonstrated ability to work across the SDLC, including supporting and interpreting findings from penetration tests and bug bounty reports
  • Familiarity with modern tech stacks, including microservices, CI/CD pipelines, and cloud-native environments
  • Solid understanding of common vulnerability classes, including injection, XSS, and authN/authZ issues, and practical mitigation strategies
  • Comfortable working in cross-functional environments and supporting multiple product and engineering teams simultaneously
  • Experience participating in or supporting incident response or security on-call rotations is a plus
  • Experience in application security engineering, with a strong focus on security tooling and automation
  • Demonstrated ability to write and maintain custom security rules and integrate them into developer workflows
  • Experience with machine learning systems, particularly generative AI, and secure development in AI-driven products
  • Experience developing internal libraries or frameworks that reduce or eliminate entire classes of vulnerabilities
  • Proficient in software development, with production-level code contributions in one or more modern languages
  • Familiarity with securing web, mobile, and native platforms
  • Experience with data security, including data protection, access control, and encryption tooling
  • Strong communication skills and ability to build trusted partnerships with cross-functional teams