Hybrid Senior Application Security Engineer

Posted yesterday

Apply now

About the role

  • Senior Application Security Engineer responsible for securing applications throughout the software development lifecycle. Joining a growing security team at e.l.f. Beauty to implement security best practices.

Responsibilities

  • Perform manual and automated security assessments of web, mobile, and cloud applications
  • Collaborate with development and engineering teams to embed security into SDLC (DevSecOps)
  • Conduct secure code reviews, threat modeling exercises, and risk assessments to identify security weaknesses in application design.
  • Implement and manage application security tools (SAST, DAST, SCA, IAST)
  • Design and enforce security policies, standards, and procedures for application development
  • Monitor, triage, and respond to application-layer vulnerabilities and incidents
  • Work closely with QA and engineering teams to drive security testing and fix validation
  • Lead the Incident Response effort for application-related security events.
  • Stay current on the latest security threats, vulnerabilities, and industry's best practices
  • Conduct developer training and promote a security-first culture within engineering
  • Cross-train team members on Application Security principles.
  • Actively participate in the broader corporate security efforts, including infrastructure security, end-user training, and vulnerability management.

Requirements

  • Bachelor's degree in Computer Science, Cybersecurity, or related field (or equivalent experience).
  • 8+ years in application security, secure software development, and penetration testing.
  • Strong understanding of web technologies (HTML, JavaScript, Python, REST APIs, etc.).
  • Experience with security tools for code security, bug bounty programs, and the ability to integrate them into CI/DC pipelines for automated security testing.
  • Familiarity with OWASP Top 10, SANS Top 25, CWE, CVE, and secure coding practices.
  • Knowledge of cloud environments (AWS, Azure, GCP) and their security features.
  • Strong communication and interpersonal skills, with the ability to collaborate effectively with technical and non-technical stakeholders.

Benefits

  • Bonus eligibility (200% of target over the last four fiscal years)
  • Equity
  • Hybrid 3 days in office, 2 days at home work environment
  • Competitive pay and benefits

Job title

Senior Application Security Engineer

Job type

Experience level

Senior

Salary

Not specified

Degree requirement

Bachelor's Degree

Location requirements

Report this job

See something inaccurate? Let us know and we'll update the listing.

Report job