Application Security Engineer

Dropbox

. Build and maintain security tools, automation, and libraries for secure-by-default development .

Posted 11/12/2026full-timeRemote • MexicoMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in application security, focusing on building and maintaining security tools and automation for secure development. Proficient in integrating security practices into engineering workflows and collaborating with cross-functional teams to enhance security culture.

Highest-signal resume keywords

Application Security EngineeringSecurity Automation ToolsCustom Security Rules DevelopmentCross-Functional CollaborationVulnerability Mitigation Strategies

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Security Tool DevelopmentCode ReviewPenetration TestingBug Bounty ReportingMicroservicesCI/CD PipelinesCloud-Native EnvironmentsData ProtectionAccess ControlEncryption

Soft Skills

Strong Communication SkillsBuilding Trusted Partnerships

Tools & Technologies

SemgrepCodeQLMachine Learning SystemsGenerative AI

Industry Keywords

Secure Development LifecycleInjection VulnerabilitiesXSSAuthN/AuthZIncident Response

Tech Stack

Tools & technologies

CloudMicroservicesSDLC

About the role

Key responsibilities & impact

Build and maintain security tools, automation, and libraries for secure-by-default development
Design and implement custom security rules using tools such as Semgrep and CodeQL
Serve as a subject matter expert on application security across web, mobile, and desktop environments
Improve and scale the Secure Development Lifecycle by integrating tools, checks, and processes into engineering workflows
Perform targeted code reviews and develop follow-up tooling or controls to prevent regressions
Collaborate with engineering, product, GRC, and AI/ML teams to proactively address security risks
Support teams through threat modeling, documentation, and education to strengthen security culture
Participate in on-call rotations when applicable, including availability during core and non-core business hours

Requirements

What you’ll need

4+ years of experience in application security or security engineering roles
Hands-on experience building or using security automation tools to improve developer workflows and product security
Demonstrated ability to work across the SDLC, including supporting and interpreting findings from penetration tests and bug bounty reports
Familiarity with modern tech stacks, including microservices, CI/CD pipelines, and cloud-native environments
Solid understanding of common vulnerability classes, including injection, XSS, and authN/authZ issues, and practical mitigation strategies
Comfortable working in cross-functional environments and supporting multiple product and engineering teams simultaneously
Experience participating in or supporting incident response or security on-call rotations is a plus
Experience in application security engineering, with a strong focus on security tooling and automation
Demonstrated ability to write and maintain custom security rules and integrate them into developer workflows
Experience with machine learning systems, particularly generative AI, and secure development in AI-driven products
Experience developing internal libraries or frameworks that reduce or eliminate entire classes of vulnerabilities
Proficient in software development, with experience contributing production-level code in one or more modern languages
Familiarity with securing web, mobile, and native platforms
Experience with data security, including data protection, access control, and encryption tooling
Strong communication skills and ability to build trusted partnerships with cross-functional teams