Sr. Application Security EngineerVerified as a real position

Who we’re looking for

• Experience in Application Security, Product Security, Secure Software Development or a related field.
• Strong understanding of application vulnerabilities, secure coding principles and frameworks such as OWASP Top 10.
• Experience with application security testing technologies, including SAST, DAST, SCA and vulnerability management platforms.
• Ability to understand source code, infrastructure definitions, configuration files and CI/CD pipelines.
• Strong understanding of modern software development practices and developer workflows.
• Experience integrating security controls into development and delivery pipelines.
• Ability to assess security risks pragmatically and communicate effectively with both technical and non-technical stakeholders.
• Strong collaboration skills and experience working across engineering, product and security teams.
• Analytical mindset with a data-informed approach to prioritization and decision making.
• Experience evaluating security tools, technologies and vendor solutions.
• Familiarity with AI-assisted engineering workflows and secure adoption of AI technologies.
• Strong written and verbal English communication skills.

What you’ll do

• Partner with engineering, platform and product teams to integrate security into development workflows and release processes.
• Perform application security reviews, threat modeling and security assessments for new features, services and architectural changes.
• Provide guidance on secure coding practices, vulnerability remediation and application hardening.
• Evaluate, implement and optimize application security tooling, including SAST, DAST and Software Composition Analysis (SCA).
• Integrate security controls and testing into CI/CD pipelines and engineering workflows.
• Support vulnerability triage, prioritization and remediation efforts across teams.
• Contribute to incident investigations, root cause analysis and long-term security improvements.
• Develop security standards, documentation, playbooks and developer guidance.
• Define and track security metrics to improve visibility, coverage and risk reduction.
• Evaluate emerging security technologies and help drive adoption of tools that create value for engineering teams.
• Promote secure AI-assisted development practices and responsible use of AI technologies.
• Foster a strong security culture through collaboration, enablement and knowledge sharing.

About the position

Gen is a global company dedicated to powering Digital Freedom through its trusted consumer brands including Norton, Avast, LifeLock, MoneyLion and more. Our combined heritage is rooted in financial empowerment and cyber safety for the first digital generations, and today we deliver award-winning cybersecurity, online privacy, identity protection and financial wellness solutions to nearly 500 million users in more than 150 countries. Together, we share a collective passion and vision to protect consumers and help them grow, manage and secure their digital and financial lives. We’re always looking for smart, fearless and high-impact talent who see AI as a teammate – leveraging it to move faster and deliver meaningful results. When you’re part of Gen, you’ll have the flexibility, tools and support to do your best work and grow your career – from flexible working options and time off to competitive pay, benefits and well-being programs. At Gen, we are scrappy and relentlessly customer driven. We create room for healthy debate, experimentation and continuous learning, and we seek out people with different experiences, identities and ideas to join our team. You’ll work with people who back each other, respect each other and understand that our differences are a competitive advantage. If this sounds like you, we’d love you to be part of Gen.

Benefits

• flexible working options and time off
• competitive pay, benefits and well-being programs