Application Security Engineer

Strategy

On-sitePosted July 31, 2026

About the role

Strategy is seeking an Application Security Engineer to join the IT Security group in Tysons Corner, Virginia. This on-site role focuses on safeguarding Strategy’s software applications by deploying AI-powered security tooling to protect the software development lifecycle at scale. You will integrate security practices throughout the SDLC to ensure our products are resilient against vulnerabilities.

JobMatcher

EN RU

Sign In Sign up Get My Matches — Free

JobMatcher

Application Security Engineer

Strategy

On-sitePosted July 31, 2026

About the role

Strategy is seeking an Application Security Engineer to join the IT Security group in Tysons Corner, Virginia. This on-site role focuses on safeguarding Strategy’s software applications by deploying AI-powered security tooling to protect the software development lifecycle at scale. You will integrate security practices throughout the SDLC to ensure our products are resilient against vulnerabilities.

JobMatcher

EN RU

Sign In Sign up Get My Matches — Free

JobMatcher

EN RU

Sign In Sign up Get My Matches — Free

Responsibilities

AI Security Governance: Evaluate and establish guardrails for AI coding assistants (e.g., Copilot, Cursor, Claude); develop policies around AI-generated code review, training data exposure risks, and prompt injection vulnerabilities in AI-integrated applications.
Secure SDLC Integration: Partner with development teams to embed security into the SDLC, including threat modeling, secure code reviews, and security testing.
Vulnerability Management: Identify, triage, and remediate vulnerabilities through SAST/DAST and SCA tools.
Security Assessments & Penetration Testing: Conduct manual and automated penetration testing of web, mobile, and cloud applications to detect security flaws.
Secure Code Review: Analyze source code using both manual review and AI-assisted code analysis tools (e.g., GitHub Copilot Autofix, Semgrep, or similar) to surface vulnerabilities earlier in the development cycle and deliver actionable remediation guidance to developers.
Threat Modeling & Risk Analysis: Perform threat modeling to anticipate potential attack vectors and improve security architecture.
DevSecOps Enablement: Support and enhance DevSecOps initiatives by integr

Track similar jobs

Get email alerts when new roles like this are posted.

Based on: Application Security Engineer

See how this role matches your resume

Sign in to get an AI match score and personalized feed.

Create account Sign in

More in Engineering

Cybersecurity Product Fintech SaaS Remote-first

Responsibilities

AI Security Governance: Evaluate and establish guardrails for AI coding assistants (e.g., Copilot, Cursor, Claude); develop policies around AI-generated code review, training data exposure risks, and prompt injection vulnerabilities in AI-integrated applications.
Secure SDLC Integration: Partner with development teams to embed security into the SDLC, including threat modeling, secure code reviews, and security testing.
Vulnerability Management: Identify, triage, and remediate vulnerabilities through SAST/DAST and SCA tools.
Security Assessments & Penetration Testing: Conduct manual and automated penetration testing of web, mobile, and cloud applications to detect security flaws.
Secure Code Review: Analyze source code using both manual review and AI-assisted code analysis tools (e.g., GitHub Copilot Autofix, Semgrep, or similar) to surface vulnerabilities earlier in the development cycle and deliver actionable remediation guidance to developers.
Threat Modeling & Risk Analysis: Perform threat modeling to anticipate potential attack vectors and improve security architecture.
DevSecOps Enablement: Support and enhance DevSecOps initiatives by integr

Track similar jobs

Get email alerts when new roles like this are posted.

Based on: Application Security Engineer

See how this role matches your resume

Sign in to get an AI match score and personalized feed.

Create account Sign in

More in Engineering

Cybersecurity Product Fintech SaaS Remote-first