Senior Application Security Engineer
- Canada
Compensation Range: $144,000 - $236,250 · Full-time
Applications open in a new tab.
Job details
- Pay
- Compensation Range: $144,000 - $236,250
- Job type
- Full-time
- Posting language
- English
- Posted
Original job description
Role Summary
Join our dynamic team as a Senior Application Security Engineer, where you'll play a pivotal role in securing the Temporal development pipeline, product, and customer execution environment. In this position, you'll work closely with software engineering teams and customers to build security deeply into our platform across multiple clouds. You'll also help shape how we use AI responsibly in both our product and our engineering processes. We're looking for individuals who are passionate about enabling engineering teams to build and ship securely, serving as trusted security partners across the organization.
What You’ll Do
Temporal is committed to providing access, equal opportunity, and reasonable accommodation for individuals with disabilities in employment, its services, programs, and activities. If you need to request a reasonable accommodation, please let your Recruiter know so we can assist.
Compensation Range: $144,000 - $236,250
Join our dynamic team as a Senior Application Security Engineer, where you'll play a pivotal role in securing the Temporal development pipeline, product, and customer execution environment. In this position, you'll work closely with software engineering teams and customers to build security deeply into our platform across multiple clouds. You'll also help shape how we use AI responsibly in both our product and our engineering processes. We're looking for individuals who are passionate about enabling engineering teams to build and ship securely, serving as trusted security partners across the organization.
What You’ll Do
- Collaborate with product and engineering teams to integrate security principles into the design and architecture of products.
- Conduct threat modeling and risk assessments to identify vulnerabilities and potential attack vectors across the full product surface.
- Manage the Secure Development pipeline including code security and 3rd party library supply chain security.
- Stay current on emerging standards and guidance (e.g. OWASP Top 10 for LLMs, MCP security specifications) and translate these into actionable internal policy.
- Triage Bug Bounty findings and responsibility disclosed vulnerabilities.
- Able to participate in on-call rotation.
- Bachelor’s degree in Computer Science, Cybersecurity, or a related field (or equivalent experience).
- 5+ years in application or product security or a related role.
- Proven partnership with engineering teams, bringing security expertise to the planning and development process.
- Knowledge of encryption, authentication, and secure communication protocols.
- Familiarity with tools like SAST, DAST, and penetration testing frameworks.
- A deep understanding of application architecture and design principles, ability to effectively identify vulnerabilities across multiple programming languages
- Excellent communication and ability to explain complex security concepts to non-technical stakeholders.
- Kubernetes security posture management and auditing, including workload hardening, RBAC design, and admission control.
- Demonstrated experience with multi-tenant security architecture, including data plane isolation, control plane hardening, and cross-tenant data leakage prevention.
- Excellent collaboration and communication skills.
- Expertise in at least one programming language, familiarity with Python and Go.
- Distributed computing and related vulnerability experience.
- Running a Security Champions program.
- Open Source automation or automation projects.
- Expertise in other areas of security.
- Security conference talks or published research.
Temporal is committed to providing access, equal opportunity, and reasonable accommodation for individuals with disabilities in employment, its services, programs, and activities. If you need to request a reasonable accommodation, please let your Recruiter know so we can assist.
Compensation Range: $144,000 - $236,250
More about this job
Responsibilities
Partner with product and engineering teams to integrate security into product design and architecture, conduct threat modeling and risk assessments, and manage code and third-party library security in the development pipeline. Triage bug bounty and responsibly disclosed vulnerabilities, translate emerging security guidance into internal policy, and participate in the on-call rotation.
Requirements
Candidates need a bachelor's degree in computer science, cybersecurity, or a related field, or equivalent experience, and at least five years in application security, product security, or a related role. They should bring strong engineering partnership and communication skills, knowledge of application security tools and protocols, Kubernetes and multi-tenant security experience, and expertise in at least one programming language, with familiarity with Python and Go.
Skills
- Application Security
- Product Security
- Threat Modeling
- Risk Assessment
- Secure Development
- Supply Chain Security
- Vulnerability Triage
- Encryption
- Authentication
- SAST
- DAST
- Penetration Testing
- Kubernetes Security
- Multi-Tenant Security Architecture
- Python and Go
Visa sponsorship
Not detected in the job text
Categories
- Security & Safety
- Software
- Technology
- Engineering
Keywords
- Application Security
- Product Security
- Secure Development Pipeline
- Threat Modeling
- Risk Assessment
- OWASP Top 10 for LLMs
- MCP Security Specifications
- Code Security
- Third-Party Library Security
- Software Supply Chain Security
- Bug Bounty
- Responsible Vulnerability Disclosure
- Encryption
- Authentication
- SAST
- DAST
- Penetration Testing
- Kubernetes
- Workload Hardening
- RBAC
- Admission Control
- Multi-Tenant Security
- Data Plane Isolation
- Control Plane Hardening
- Python
- Go
- Distributed Computing
- Security Champions