Application Security Engineer

Strategy

On-sitePosted 31 июля 2026 г.

About the role

Strategy is seeking an Application Security Engineer to join the IT Security group in Tysons Corner, Virginia. This on-site role focuses on safeguarding Strategy’s software applications by deploying AI-powered security tooling to protect the software development lifecycle at scale. You will integrate security practices throughout the SDLC to ensure our products are resilient against vulnerabilities.

Application Security Engineer

Strategy

On-sitePosted 31 июля 2026 г.

About the role

Strategy is seeking an Application Security Engineer to join the IT Security group in Tysons Corner, Virginia. This on-site role focuses on safeguarding Strategy’s software applications by deploying AI-powered security tooling to protect the software development lifecycle at scale. You will integrate security practices throughout the SDLC to ensure our products are resilient against vulnerabilities.

Responsibilities

AI Security Governance: Evaluate and establish guardrails for AI coding assistants (e.g., Copilot, Cursor, Claude); develop policies around AI-generated code review, training data exposure risks, and prompt injection vulnerabilities in AI-integrated applications.
Secure SDLC Integration: Partner with development teams to embed security into the SDLC, including threat modeling, secure code reviews, and security testing.
Vulnerability Management: Identify, triage, and remediate vulnerabilities through SAST/DAST and SCA tools.
Security Assessments & Penetration Testing: Conduct manual and automated penetration testing of web, mobile, and cloud applications to detect security flaws.
Secure Code Review: Analyze source code using both manual review and AI-assisted code analysis tools (e.g., GitHub Copilot Autofix, Semgrep, or similar) to surface vulnerabilities earlier in the development cycle and deliver actionable remediation guidance to developers.
Threat Modeling & Risk Analysis: Perform threat modeling to anticipate potential attack vectors and improve security architecture.
DevSecOps Enablement: Support and enhance DevSecOps initiatives by integr

Responsibilities

AI Security Governance: Evaluate and establish guardrails for AI coding assistants (e.g., Copilot, Cursor, Claude); develop policies around AI-generated code review, training data exposure risks, and prompt injection vulnerabilities in AI-integrated applications.
Secure SDLC Integration: Partner with development teams to embed security into the SDLC, including threat modeling, secure code reviews, and security testing.
Vulnerability Management: Identify, triage, and remediate vulnerabilities through SAST/DAST and SCA tools.
Security Assessments & Penetration Testing: Conduct manual and automated penetration testing of web, mobile, and cloud applications to detect security flaws.
Secure Code Review: Analyze source code using both manual review and AI-assisted code analysis tools (e.g., GitHub Copilot Autofix, Semgrep, or similar) to surface vulnerabilities earlier in the development cycle and deliver actionable remediation guidance to developers.
Threat Modeling & Risk Analysis: Perform threat modeling to anticipate potential attack vectors and improve security architecture.
DevSecOps Enablement: Support and enhance DevSecOps initiatives by integr

Track similar jobs

Get email alerts when new roles like this are posted.

Based on: Application Security Engineer

Насколько эта вакансия подходит вашему резюме

Войдите, чтобы увидеть AI match score и персональную ленту.

Создать аккаунт Войти

More in Engineering

Cybersecurity Product Fintech SaaS Remote-first