Sonar - Application Security Engineer
Requirements
• Secure product and cloud architecture • Extensive experience with application and cloud architectures, predominantly AWS, and a strong interest in how modern cloud patterns can strengthen or weaken security. • Extensive experience conducting application security assessments, including code review and evaluation of authentication and authorization designs. • Experience assessing and securing AI and agentic AI capabilities, with the curiosity to experiment, learn, and help define emerging best practices. • Experience applying threat-modeling approaches, such as STRIDE, to improve design discussions and identify risks early. • Security assurance and remediation • Experience with penetration testing, red-team engagements, and bug-bounty programs, with an attacker mindset focused on protecting what matters most. • Experience investigating and managing vulnerabilities, from triage and prioritization through to remediation and organizational learning. • Threat awareness and security automation • Practical experience using AI to automate repeatable security work, along with enthusiasm for building small tools and experiments that make security teams faster and more effective. • Familiarity with Azure, GCP, and Google Workspace is a plus, as is the appetite to learn new platforms and ecosystems as Sonar evolves. • Additional comments • This role is based in Austin, TX. We are unable to consider candidates unwilling to be in Austin, but we are willing to relocate the right candidate.
Responsibilities
• Shape secure products and cloud architecture • Partner with product and engineering teams from the earliest design stages to build secure, resilient solutions by design. • Review product architectures and AWS environments, ensuring security requirements meaningfully inform technical decisions and final designs. • Lead security assurance and improvement • Deliver high-impact initiatives from the strategic security plan, from evaluating new approaches to deploying modern security tools and capabilities across the organization. • Plan and manage independent security assessments, penetration tests, and red-team exercises; translate findings into practical improvements and customer-facing trust artifacts. • Investigate complex product and internal security findings, identify root causes, and help teams implement durable remediation. • Strengthen customer trust and incident readiness • Lead the investigation and resolution of customer security concerns with rigor and empathy, using each engagement to reinforce confidence in our security program. • Serve as a security subject-matter expert during incidents, helping teams understand, contain, and learn from emerging threats. Occasional on-call participation may be required. • Anticipate threats and scale the security program • Monitor and interpret threat intelligence, turning changes in the threat landscape into prioritized risks and actionable recommendations. • Continuously improve and automate security processes, increasing the quality, speed, and visibility of information that informs the security strategy.
Benefits
• Flexible comprehensive employee benefit package. • We encourage usage of our robust time-off allocations. You will receive 23 days of PTO per calendar year (on a pro-rated basis depending on your employment start date), with additional time provided for sickness, life events and holidays. • We offer an exciting 401(k) plan that has a 4% match. • Generous discretionary Company Growth Bonus, paid annually. • Fully paid parking in the heart of downtown Austin, Texas. • Global workforce with employees in 20+ countries representing 35+ unique nationalities. • We have an annual kick-off somewhere in the world where we meet to build relationships and goals for the company. • Monthly catered events, and team events. • We value diversity, equity, and inclusion
Apply in one click
Upload My Resume
Drop here or click to browse · Tap to choose · PDF, DOCX, DOC, RTF, TXT