Security Engineer, Application Security
Security Engineer, Application Security
Employer Active
Job Alert
You will be updated with latest job alerts via email
Share
Job Alert
You will be updated with latest job alerts via email
Not Disclosed
Salary Not Disclosed
1 Vacancy
Job Description
Role Description
As part of the Application Security team youll focus on reducing risk at scale by building the security infrastructure automation and tooling that empowers engineers to ship secure products with confidence. We work closely with engineering and product teams throughout the software development lifecycle (SDLC) embedding secure-by-default practices and delivering scalable solutions.
Application Security Engineers create impact by designing and implementing security tooling writing custom security rules and building frameworks that address broad classes of addition to proactive development we support teams through design consultations threat modeling documentation and education to uplift security culture across Dropbox.
Our Engineering Career Framework is viewable by anyone outside the company and describes whats expected for our engineers at each of our career levels. Check out our blog post on this topic and more here.
Responsibilities
- Build and maintain security tools automation and libraries to enable secure-by-default development across engineering teams.
- Design and implement custom security rules (e.g. Semgrep CodeQL) to detect and prevent common and emerging vulnerability patterns.
- Act as a subject matter expert on application security across web mobile and desktop environments.
- Conduct security consultations and threat modeling sessions and clearly communicate risk and mitigation strategies to technical and non-technical stakeholders.
- Improve and scale the Secure Development Lifecycle (SDLC) by integrating tools checks and processes into engineering workflows.
- Perform targeted code and design reviews and develop follow-up tooling or controls to prevent regressions.
- Collaborate cross-functionally with engineering product GRC and AI/ML teams to proactively address security risks especially in fast-moving and emerging tech areas.
On-call work may be necessary occasionally to help address bugs outages or other operational issues with the goal of maintaining a stable and high-quality experience for our customers.
Requirements
- 3 years of experience in application security or security engineering roles.
- Hands-on experience building or using security automation tools to improve developer workflows and product security.
- Demonstrated ability to work across the SDLC including supporting and interpreting findings from penetration tests and bug bounty reports.
- Familiarity with modern tech stacks including microservices CI/CD pipelines and cloud-native environments.
- Solid understanding of common vulnerability classes (e.g. injection XSS authN/authZ issues) and practical mitigation strategies.
- Comfortable working in cross-functional environments and supporting multiple product and engineering teamssimultaneously.
- Experience participating in or supporting incident response or security on-call rotations is a plus
Preferred Qualifications
- Experience in application security engineering with a strong focus on security tooling and automation.
- Demonstrated ability to write and maintain custom security rules and integrate them into developer workflows.
- Experience with machine learning systems particularly generative AI and the ability to support secure development in AI-driven products.
- Experience developing internal libraries or frameworks that reduce or eliminate entire classes of vulnerabilities.
- Proficient in software development with experience contributing production-level code in one or more modern languages.
- Familiarity with securing diverse application types including web mobile and native platforms.
- Experience with data security including tooling for data protection access control and encryption.
- Strong communication skills and ability to build trusted partnerships with cross-functional teams.
Employment Type
Full Time
