Strategy (Nasdaq: MSTR) Tysons Corner, VA — on-site, full-time. Join Strategy's IT Security group as an Application Security Engineer and play a crucial role in safeguarding Strategy's software applications by deploying AI-powered security tooling to protect the software development lifecycle at scale. You will be responsible for integrating security practices throughout the SDLC, ensuring our software products are resilient against vulnerabilities. Responsibilities include: AI Security Governance—evaluate and establish guardrails for the secure use of AI coding assistants within the engineering organization, including policy development around AI-generated code review, training data exposure risks, and prompt injection vulnerabilities in AI-integrated applications; Secure SDLC Integration—collaborate with development teams to integrate security into the SDLC, including threat modeling, secure code reviews, and security testing; Vulnerability Management—identify, triage, and remediate security vulnerabilities through static and dynamic application security testing (SAST/DAST) and software composition analysis (SCA) tools; Security Assessments & Penetration Testing—conduct manual and automated penetration testing of web, mobile, and cloud applications to detect security flaws; Secure Code Review—analyze source code using both manual review and AI-assisted code analysis tools to surface vulnerabilities earlier in the development cycle and deliver actionable, in-context remediation guidance to developers; Threat Modeling & Risk Analysis—perform threat modeling to anticipate po

Strategy (Nasdaq: MSTR) Tysons Corner, VA — on-site, full-time. Join Strategy's IT Security group as an Application Security Engineer and play a crucial role in safeguarding Strategy's software applications by deploying AI-powered security tooling to protect the software development lifecycle at scale. You will be responsible for integrating security practices throughout the SDLC, ensuring our software products are resilient against vulnerabilities. Responsibilities include: AI Security Governance—evaluate and establish guardrails for the secure use of AI coding assistants within the engineering organization, including policy development around AI-generated code review, training data exposure risks, and prompt injection vulnerabilities in AI-integrated applications; Secure SDLC Integration—collaborate with development teams to integrate security into the SDLC, including threat modeling, secure code reviews, and security testing; Vulnerability Management—identify, triage, and remediate security vulnerabilities through static and dynamic application security testing (SAST/DAST) and software composition analysis (SCA) tools; Security Assessments & Penetration Testing—conduct manual and automated penetration testing of web, mobile, and cloud applications to detect security flaws; Secure Code Review—analyze source code using both manual review and AI-assisted code analysis tools to surface vulnerabilities earlier in the development cycle and deliver actionable, in-context remediation guidance to developers; Threat Modeling & Risk Analysis—perform threat modeling to anticipate po