The Application Security Engineer is responsible for integrating security throughout the software development lifecycle to reduce risk and improve the security of PowerSchool's products and services.
Responsibilities
Partner with development, architecture, product, and DevOps teams to integrate security throughout the software development lifecycle.
Perform threat modeling exercises to identify potential attack vectors, security risks, and required security controls for new and existing applications.
Conduct secure architecture and design reviews to identify security weaknesses and recommend effective mitigations early in the development process.
Provide security guidance and consultation to engineering teams regarding secure coding practices, application security risks, and security requirements.
Manage and support application security testing programs, including static application security testing (SAST), dynamic application security testing (DAST), software composition analysis (SCA), secret scanning, and related security technologies.
Requirements
Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Software Engineering, or a related field; or equivalent combination of education, training, and experience.
The Application Security Engineer is responsible for integrating security throughout the software development lifecycle to reduce risk and improve the security of PowerSchool's products and services.
Responsibilities
Partner with development, architecture, product, and DevOps teams to integrate security throughout the software development lifecycle.
Perform threat modeling exercises to identify potential attack vectors, security risks, and required security controls for new and existing applications.
Conduct secure architecture and design reviews to identify security weaknesses and recommend effective mitigations early in the development process.
Provide security guidance and consultation to engineering teams regarding secure coding practices, application security risks, and security requirements.
Manage and support application security testing programs, including static application security testing (SAST), dynamic application security testing (DAST), software composition analysis (SCA), secret scanning, and related security technologies.
Requirements
Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Software Engineering, or a related field; or equivalent combination of education, training, and experience.
Arquitetar e garantir a segurança de aplicações, incluindo aquelas que integram LLMs e IA generativa, em colaboração com equipes de engenharia e produto.
Responsibilities
Definir e implementar estratégias de segurança para aplicações com LLMs e IA generativa
Colaborar com equipes de desenvolvimento para integrar práticas de segurança desde o início do ciclo de vida do software
Realizar revisões de arquitetura, código e design para identificar vulnerabilidades
Definir guardrails e padrões para aplicações com LLM, abordando riscos como prompt injection e vazamento de dados
Estabelecer diretrizes para uso seguro de ferramentas de desenvolvimento assistidas por IA
Requirements
Curso superior em Segurança da Informação, Ciência da Computação, Sistemas de Informação ou Engenharia de Software
Nice to have: Experiência com regulamentos financeiros (Bacen, PCI, SOX)
Nice to have: Experiência em incident response
Nice to have: Experiência em projetos com requisitos financeiros
Nice to have: Conhecimento de frameworks de governança de IA (NIST AI RMF, ISO/IEC 42001)
Lead and manage the SecOps team, overseeing security operations, incident response, vulnerability management, and ISO 27001 compliance for a full-cloud ad tech platform.
Lead application and cloud security for the FT’s AWS-hosted, cloud-native technology estate, improving guardrails, vulnerability management, and threat modelling.
Locations (2)
London, England, United Kingdom
Sofia, Sofia-Capital, Bulgaria
Responsibilities
Improve application security guardrails
Tune and evolve SAST, software composition analysis, secret scanning and related controls
Improve cloud and IaC security guardrails
Help identify, prioritise and reduce AWS and infrastructure-as-code misconfigurations and vulnerabilities at scale
Lead security engineering for Mixpanel’s product and infrastructure, designing and implementing security features, managing risk, and driving secure practices across the organization.
Senior Application Security EngineerNewPowerSchool Group LLC · Plano, US
Staff Security EngineerNewStone - Linkedin · Remote
Senior Security ArchitectNewQuinyx · Stockholm, Sweden
Principal Security EngineerRWS Group · Maidenhead, United Kingdom
SecOps ManagerEquativ · Paris, France
Staff Security EngineerMixpanel · San Francisco