Smartsheet12 дней назад

Principal Security Engineer

Зарплата не указана
РЫНОК
19 501медиана по профессии
DevOps Engineer · 10 вакансий с указанной зарплатой
5 500половина предложений: 13 917–25 313200 000
Работодатель не указал зарплату — сравните с рынком сами.
Bellevue

Обязанности

  • 01Lead threat modeling and product security reviews
  • 02Define and lead the product security review service
  • 03Engage product and engineering directly to establish security requirements
  • 04Define AI security methodology and drive it across the practice
  • 05Own and evolve the AI-assisted security review capability
  • 06Shape AppSec technical direction and SDLC controls
  • 07Build runbooks, standards, and documentation
  • 08Mentor AppSec team members on threat modeling tradecraft and security review design

Требования

  • 0110+ years in application security with sustained technical leadership
  • 02Ability to own threat modeling as a systematic practice (STRIDE, data-flow and architecture diagram driven)
  • 03Hands-on experience securing AI-integrated applications (LLM workflows, agentic systems, model APIs)
  • 04Fluency in OWASP LLM Top 10 and current AI attack classes
  • 05Experience doing architecture review and targeted manual code review for complex SaaS features
  • 06Experience mentoring engineers into threat modeling ownership
  • 07Sufficient depth in SAST, SCA, secrets, and IaC scanning in modern CI/CD pipelines
  • 08Cloud security fundamentals
  • 09Fluent in one or more modern languages (Python, Java, TypeScript/JavaScript, Go)
  • 10Expertise communicating risk and security requirements clearly across audiences
  • 11Ability to build trusted relationships across teams

Условия

  • 01Role reports to Manager, Application Security
  • 02Can be based in Bellevue, WA office or remotely from anywhere in the US where Smartsheet is a registered employer