Senior Application Security Engineer responsible for securing applications throughout the software development lifecycle. Joining a growing security team at e.l.f. Beauty to implement security best practices.
Responsibilities
Perform manual and automated security assessments of web, mobile, and cloud applications
Collaborate with development and engineering teams to embed security into SDLC (DevSecOps)
Conduct secure code reviews, threat modeling exercises, and risk assessments to identify security weaknesses in application design.
Implement and manage application security tools (SAST, DAST, SCA, IAST)
Design and enforce security policies, standards, and procedures for application development
Monitor, triage, and respond to application-layer vulnerabilities and incidents
Work closely with QA and engineering teams to drive security testing and fix validation
Lead the Incident Response effort for application-related security events.
Stay current on the latest security threats, vulnerabilities, and industry's best practices
Conduct developer training and promote a security-first culture within engineering
Cross-train team members on Application Security principles.
Actively participate in the broader corporate security efforts, including infrastructure security, end-user training, and vulnerability management.
Requirements
Bachelor's degree in Computer Science, Cybersecurity, or related field (or equivalent experience).
8+ years in application security, secure software development, and penetration testing.
Strong understanding of web technologies (HTML, JavaScript, Python, REST APIs, etc.).
Experience with security tools for code security, bug bounty programs, and the ability to integrate them into CI/DC pipelines for automated security testing.
Familiarity with OWASP Top 10, SANS Top 25, CWE, CVE, and secure coding practices.
Knowledge of cloud environments (AWS, Azure, GCP) and their security features.
Strong communication and interpersonal skills, with the ability to collaborate effectively with technical and non-technical stakeholders.
Benefits
Bonus eligibility (200% of target over the last four fiscal years)
Equity
Hybrid 3 days in office, 2 days at home work environment
Cloud Application Development Engineer at Intel responsible for designing and developing cloud - native applications. Involves building scalable APIs, ensuring security, and troubleshooting production issues.
Application Support Engineer providing technical support for logistics applications with a focus on troubleshooting and performance monitoring. Collaborating with development and business teams for issue resolution in a hybrid work environment.
Application Engineering Manager leading a team of engineers to integrate products into customer vehicles. Focusing on technical solutions and collaboration with automotive OEMs and Tier 1 suppliers.
Application Security Engineer ensuring security is integral to AI product development. Collaborating with engineers on securing code and overseeing vulnerability management.
Application Engineer delivering solutions to customers in the semi/display industry. Leading execution teams and applying customer technologies in Tainan and Hsinchu, Taiwan.
Sales Application Engineer preparing commercial proposals and technical specifications for solar PV and battery energy storage systems. Collaborating with clients and vendors to define integrated solutions.
Experienced Hardware Applications Engineer at Cirrus Logic driving audio technologies for laptops and desktops. Collaborating with industry customers on technical design and integration efforts.
Application Engineering Manager at MPS leading DDR5 SPD Hub validation and characterization. Develop and prototype solutions for Data Center applications with a focus on PCB design and digital logic.
Application Engineer at Monolithic Power Systems validating DDR5 SPD Hub logic and prototypes for Data Center applications. Collaborating with multi - disciplinary teams to drive and design key DP Hub aspects.