About this role

Saronic is seeking an Application Security Engineer to build and own the security of their software development lifecycle and supply chain. You will partner with engineering teams to integrate security practices, implement threat modeling, secure code reviews, and manage secrets and application controls. This role focuses on making security the default, enabling rapid and safe software deployment.

What we are looking for

6

Secure SDLC & DevSecOps: threat modeling, secure code reviews, SAST/DAST/SCA integration
Software Supply Chain security: dependency management, SBOMs, artifact signing
Secrets & Application Controls: secrets management, allowlisting/blocklisting
Secure Self-Hosting Infrastructure: design and harden infrastructure across AWS, Azure, and on-prem
Partner with engineering teams to build scalable security tooling
5+ years in application security or DevSecOps

Work authorization

Must be a U.S. citizen or permanent resident.