Staff Security Engineer, Application Security

Writer

. Conduct threat modeling sessions with product teams .

Posted 9/24/2026full-timeUnited StatesLead💰 $204,000 - $240,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in application security engineering, with a focus on secure architecture design, threat modeling, and vulnerability management. Proficient in implementing security controls and conducting security assessments while effectively communicating complex security concepts to diverse audiences.

Highest-signal resume keywords

Application Security EngineeringSAST/DAST SolutionsPython ProgrammingSecurity Code ReviewsVulnerability Management

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Application Security EngineeringThreat ModelingSecure Architecture DesignSecurity Code ReviewsVulnerability ManagementSAST SolutionsDAST SolutionsPython ProgrammingJava ProgrammingGo Programming

Soft Skills

Excellent Communication SkillsCollaborative Work

Tools & Technologies

CI/CD PipelinesSecurity Testing FrameworksDevSecOps PracticesAI Agents

Industry Keywords

Security AssessmentsPenetration TestingSecure Coding StandardsEmerging AI/ML Security Threats

Tech Stack

Tools & technologies

JavaJavaScriptPythonTypeScriptGo

About the role

Key responsibilities & impact

Conduct threat modeling sessions with product teams
Design secure architectures for new features
Ensure security considerations shape product decisions from day one
Own and evolve the application security program
Establish and maintain SAST/DAST scanning in CI/CD pipelines
Conduct security code reviews for critical changes
Build automation to identify vulnerabilities before production
Establish and champion secure coding standards
Create reusable security patterns and libraries
Design and recommend security features and products for customer environments
Integrate and leverage AI agents to increase security-team and engineering velocity
Lead security assessments and penetration testing of applications, AI services, and APIs
Identify vulnerabilities and collaborate with teams on remediation at scale
Design and implement security controls for data pipelines, model training environments, and customer-facing AI agents
Research emerging AI/ML and LLM security threats and build proactive defenses
Report to the head of security engineering

Requirements

What you’ll need

Minimum 4 years of hands-on experience in application security engineering
Proven track record of securing large-scale production systems
Understanding of developer experience and developer workflows for shipping features and products
Technical expertise in at least two programming languages: Python, Java, Go, or JavaScript/TypeScript
Ability to read and review code across multiple languages, understanding business logic and security implications
Knowledge of SAST/DAST solutions, vulnerability management platforms, security testing frameworks, and DevSecOps practices
Excellent communication skills for translating complex security concepts to technical and non-technical audiences
Alignment with WRITER's values of Connect, Challenge, and Own
Ability and willingness to work in person, collaboratively, 3 days per week
Must be located within 50 miles of a WRITER office hub or willing to relocate

Benefits

Comp & perks

Generous PTO, plus company holidays
Medical, dental, and vision coverage for you and your family
Paid parental leave for all parents (16 weeks)
Fertility and family planning support
Early-detection cancer testing through Galleri
Flexible spending account and dependent FSA options
Health savings account for eligible plans with company contribution
Wellness stipend for gym, massage/chiropractor, personal training, etc.
Learning and development stipend
Company-wide off-sites and team off-sites
Competitive compensation
Company stock options
401k