Senior Application Security Engineer

Responsibilities

• Manage and optimize core application defenses, including WAF and automated vulnerability scanning tools
• Architect and maintain security gating processes within the CI/CD pipeline
• Govern and secure the AI pipeline within the SDLC by implementing monitoring and safety guardrails
• Partner with development teams to remediate vulnerabilities and scale the security champions program
• Co-lead the public bug bounty initiative
• Mentor junior engineers and analysts

Requirements

• Bachelor's degree in Computer Science or equivalent practical experience
• 5 years of experience managing Web Application Firewalls (WAF)
• Experience integrating automated security gating into CI/CD pipelines
• Experience with vulnerability management and cloud-hosted application security scanning tools
• Experience collaborating with software development teams on threat mitigation
• Proficiency in scripting or programming languages such as Python, Java, or Kotlin

Preferred Qualifications

• Experience implementing security guardrails for LLMs and AI-assisted development tools
• Experience leading a security champions program or bug bounty platform
• Experience mentoring junior security professionals
• Experience analyzing technical security risks and presenting metrics to management
• Knowledge of ISP infrastructure, web-scale networks, or cloud environments like GCP or AWS

About the Company

GFiber is an Alphabet company that brings Google Fiber and Google Fiber Webpass internet services to homes and businesses across the United States.