temporal - Staff Application Security Engineer

Remote - United States (Remote)1w ago

Remote Staff NA Cybersecurity Artificial Intelligence Application Security Engineer Team Management Kubernetes Go Plane

Requirements

• Bachelor’s degree in Computer Science, Cybersecurity, or a related field (or equivalent experience). • 7+ years in application or product security or a related role. • Proven partnership with engineering teams, bringing security expertise to the planning and development process. • Ability to write production-quality code in at least one programming language, with a history of development beyond simple scripting. • Knowledge of encryption, authentication, and secure communication protocols. • Familiarity with tools like SAST, DAST, and penetration testing frameworks. • A deep understanding of application architecture and design principles, ability to effectively identify vulnerabilities across multiple programming languages • Excellent communication and ability to explain complex security concepts to non-technical stakeholders. • Kubernetes security posture management and auditing, including workload hardening, RBAC design, and admission control. • Demonstrated experience with multi-tenant security architecture, including data plane isolation, control plane hardening, and cross-tenant data leakage prevention. • Distributed computing and related vulnerability experience. • Familiarity with Go. • Running a Security Champions program. • Open Source automation or automation projects. • Expertise in other areas of security. • Security conference talks or published research.

Responsibilities

• Collaborate with product and engineering teams to integrate security principles into the design and architecture of products. • Lead complex threat modeling and risk assessments to identify vulnerabilities and potential attack vectors across the full product surface. • Drive strategy, influence architecture, and set direction for security across multiple teams or org-wide. • Manage the Secure Development pipeline including code security and 3rd party library supply chain security. • Stay current on emerging standards and guidance (e.g. OWASP Top 10 for LLMs, MCP security specifications) and translate these into actionable internal policy. • Own responsibility disclosed vulnerabilities in both Cloud and Open Source products. • Able to participate in on-call rotation.