Strategy (Nasdaq: MSTR) is seeking an Application Security Engineer to join the IT Security group in Tysons Corner, VA. This full-time, on-site position involves safeguarding Strategy’s software applications by deploying AI-powered security tooling to protect the software development lifecycle at scale. You will be responsible for integrating security practices throughout the SDLC to ensure our products are resilient against vulnerabilities. Responsibilities include AI Security Governance: establish guardrails for the secure use of AI coding assistants, including policy development around AI-generated code review, training data exposure risks, and prompt injection vulnerabilities. Secure SDLC Integration: collaborate with development teams to embed security into the SDLC, including threat modeling, secure code reviews, and security testing. Vulnerability Management: identify, triage, and remediate vulnerabilities using SAST/DAST and SCA tools. Security Assessments & Penetration Testing: perform manual and automated testing of web, mobile, and cloud applications. Secure Code Review: analyze source code with manual reviews and AI-assisted tools to surface vulnerabilities earlier and provide remediation guidance. Threat Modeling & Risk Analysis: conduct threat modeling to anticipate attacks and improve security architecture. DevSecOps Enablement: enhance DevSecOps by integrating AI-assisted security automation in CI/CD pipelines. Incident Response & Remediation: assist in investigating incidents and remediating threats. Security Awareness & Training: educate developers on OWAS

Strategy (Nasdaq: MSTR) is seeking an Application Security Engineer to join the IT Security group in Tysons Corner, VA. This full-time, on-site position involves safeguarding Strategy’s software applications by deploying AI-powered security tooling to protect the software development lifecycle at scale. You will be responsible for integrating security practices throughout the SDLC to ensure our products are resilient against vulnerabilities. Responsibilities include AI Security Governance: establish guardrails for the secure use of AI coding assistants, including policy development around AI-generated code review, training data exposure risks, and prompt injection vulnerabilities. Secure SDLC Integration: collaborate with development teams to embed security into the SDLC, including threat modeling, secure code reviews, and security testing. Vulnerability Management: identify, triage, and remediate vulnerabilities using SAST/DAST and SCA tools. Security Assessments & Penetration Testing: perform manual and automated testing of web, mobile, and cloud applications. Secure Code Review: analyze source code with manual reviews and AI-assisted tools to surface vulnerabilities earlier and provide remediation guidance. Threat Modeling & Risk Analysis: conduct threat modeling to anticipate attacks and improve security architecture. DevSecOps Enablement: enhance DevSecOps by integrating AI-assisted security automation in CI/CD pipelines. Incident Response & Remediation: assist in investigating incidents and remediating threats. Security Awareness & Training: educate developers on OWAS