Staff Engineer, Application Security

Renew Home

. Help define and drive company-wide security strategy across applications, cloud infrastructure, and AI systems .

Posted 11/3/2026full-timeRemote • United StatesLead💰 $170,000 - $220,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive experience in application, cloud, and infrastructure security, with a strong focus on security architecture, risk management, and secure software development practices. Proficient in leading cross-functional security initiatives and improving security capabilities through technical leadership and mentorship.

Highest-signal resume keywords

Application SecurityCloud SecuritySecurity Architecture DesignAWS Security ServicesSecurity Incident Leadership

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Security EngineeringAPI SecurityThreat ModelingVulnerability RemediationSecure Software Development LifecycleNetworking ProtocolsAuthentication and AuthorizationSecurity TestingCode ReviewRisk Assessment

Soft Skills

Strong CommunicationInfluencing Technical DirectionMentorshipCross-Functional CollaborationProblem-Solving

Tools & Technologies

AWSGCPCodeQLBurp SuiteZapNucleiIAMWAFGuardDutyAWS Inspector

Certifications & Qualifications

SOC 2ISO 27001

Industry Keywords

Security StrategyAI Security RisksSecure-By-Default ControlsSoftware Supply Chain SecurityCompliance Programs

Tech Stack

Tools & technologies

AWSCloudDNSGoogle Cloud PlatformSDLCSMTPTCP/IP

About the role

Key responsibilities & impact

Help define and drive company-wide security strategy across applications, cloud infrastructure, and AI systems
Identify highest-impact risks and lead cross-functional initiatives to address them
Lead security architecture reviews, threat modeling, code reviews, and security testing
Partner with engineering teams to build security into the SDLC and eliminate vulnerability classes through secure-by-default patterns and guardrails
Define and implement security guardrails for LLM-powered applications, AI agents, coding assistants, and MCP/tool integrations
Improve security across AWS/GCP, containers, CI/CD, IAM, and the software supply chain through scalable controls and automation
Improve vulnerability discovery, prioritization, remediation, and detection
Provide technical leadership during significant security incidents
Partner with Engineering, Infrastructure, IT, Legal, and other teams on security architecture, policies, compliance programs, and emerging risks
Raise engineering security capabilities through tooling, training, security champions, technical guidance, and mentorship

Requirements

What you’ll need

7+ years of experience in application, product, cloud, or infrastructure security, with strong hands-on security engineering experience
Strong software engineering skills and ability to read, write, and review production code
Deep understanding of application and API security, authentication and authorization, cloud security, and modern software development and delivery
Experience designing scalable security architecture and secure-by-default controls across applications and cloud infrastructure
Understanding of AI and agentic security risks, including prompt injection, insecure tool use, excessive permissions, sensitive-data leakage, and risks associated with MCP and third-party AI integrations
Proficiency with AWS security services, including IAM, WAF, GuardDuty, and AWS Inspector
Proficiency with CodeQL, Burp Suite, Zap, and Nuclei
Strong understanding of networking, security, and core Internet protocols, including TCP/IP, DNS, SMTP, SSL, and distributed networks
Ability to lead complex security initiatives across multiple teams, influence technical direction, and operate independently in ambiguous problem spaces
Strong communication skills and ability to translate security risks into practical engineering decisions
Experience with AWS security services, application security tooling, SOC 2/ISO 27001, and AI-assisted security tools is a plus
Must be authorized to work in the United States without current or future immigration sponsorship

Benefits

Comp & perks

Target annual bonus of 15% of base salary
Participation in long-term incentive programs tied to company growth and performance
Fully remote work environment
Home office set-up allowance
No pre-set vacation limits
Parental leave benefits
Health and wellness benefits
401(k) plan with employer contributions
Learning and growth opportunities