Senior Level Application Security Engineer Jobs
Senior level application security engineer jobs place experienced engineers at the center of security architecture decisions, owning threat modeling programs, driving secure development standards, and leading the teams that execute them. Roles are 55% remote or hybrid, concentrated in Technology & Software, Science & Research, and Investment & Asset Management, with Gemini, Anthropic, and Roblox hiring at this level now.
Find JobsOverview
Showing 5 of 27+ Senior Level Application Security Engineer jobs
Job Title: Application Security Architect
Duration: 6-12+ months
Location: Richmond, VA (Hybrid)
Final onsite Interview
ROLE AND RESPONSIBILITIES
- 10+ years in software engineering, application security, security engineering, or related technical roles, including 2+ years designing security architecture for systems.
- Strong understanding of secure software-development principles and common application risks, including the OWASP Top 10, insecure authorization, injection, deserialization, and API abuse.
- Design and implement end-to-end security architectures for data-at-rest, in-transit, and in-use across Azure, SQL Server, Dynamics 365, Power Platform, and ArcGIS platforms, utilizing automated classification (e.g., Microsoft Purview), robust encryption, DLP rules, and privacy risk assessments (DPIAs) to protect sensitive state transportation and infrastructure assets.
- Experience securing APIs, web applications, distributed systems, cloud platforms, CI/CD pipelines, and containerized workloads.
- Working knowledge of secure coding in one or more common ecosystems, such as Java, .NET, JavaScript/TypeScript, Python platforms.
- Experience with identity, OAuth 2.0, OpenID Connect, SAML, JWTs, authorization design, PKI/TLS, encryption, and secrets-management practices.
Job Title: Application Security Architect
Duration: 6-12+ months
Location: Richmond, VA (Hybrid)
Final onsite Interview
ROLE AND RESPONSIBILITIES
- 10+ years in software engineering, application security, security engineering, or related technical roles, including 2+ years designing security architecture for systems.
- Strong understanding of secure software-development principles and common application risks, including the OWASP Top 10, insecure authorization, injection, deserialization, and API abuse.
- Design and implement end-to-end security architectures for data-at-rest, in-transit, and in-use across Azure, SQL Server, Dynamics 365, Power Platform, and ArcGIS platforms, utilizing automated classification (e.g., Microsoft Purview), robust encryption, DLP rules, and privacy risk assessments (DPIAs) to protect sensitive state transportation and infrastructure assets.
- Experience securing APIs, web applications, distributed systems, cloud platforms, CI/CD pipelines, and containerized workloads.
- Working knowledge of secure coding in one or more common ecosystems, such as Java, .NET, JavaScript/TypeScript, Python platforms.
- Experience with identity, OAuth 2.0, OpenID Connect, SAML, JWTs, authorization design, PKI/TLS, encryption, and secrets-management practices.
See All 27 Senior Level Application Security Engineer Jobs
Find roles that match your experience and apply in just a few clicks.
Find JobsSenior Level Application Security Engineer Job Market
Who's Hiring
Top Industries Hiring
- Technology & Software13
- Science & Research3
- Investment & Asset Management3
- Insurance1
- Manufacturing1
Senior Level Application Security Engineer Jobs: Frequently Asked Questions
How do I get a senior level application security engineer job?
Employers at this level look for engineers who have led security design reviews, owned vulnerability management programs, and can demonstrate measurable impact on an organization's security posture. Deep expertise in secure SDLC, threat modeling, and at least one cloud environment gives candidates a clear edge. Certifications like OSCP, CISSP, or CSSLP strengthen a profile, but hands-on architecture ownership matters most.
Which companies hire senior level application security engineers?
Companies hiring senior level application security engineers right now include Gemini, Anthropic, and Roblox, based on current listings on Migrate Mate as of September 2026. Hiring at this level comes primarily from large technology firms, financial institutions, and defense contractors that run mature security programs requiring engineers who can lead, not just execute.
Are there remote senior level application security engineer jobs?
Yes, remote availability is strong at this level. About 55% of senior level application security engineer openings are remote or hybrid as of September 2026, reflecting how many organizations treat experienced security engineers as distributed contributors who can lead architecture reviews and mentor teams without being on-site every day.
What makes an application security engineer role senior level?
Senior roles shift from executing security tasks to owning security outcomes. Expectations include leading threat modeling and secure design reviews, setting security standards across engineering teams, mentoring junior engineers, and influencing product roadmaps from a security perspective. The scope is broader, the decisions are less supervised, and the expectation is that you drive program direction rather than respond to it.
Which industries hire the most senior level application security engineers?
Senior level application security engineer roles concentrate in Technology & Software, Science & Research, and Investment & Asset Management, based on current listings on Migrate Mate as of September 2026. These sectors invest heavily at the senior level because they operate regulated environments, handle sensitive customer data, or build products where a security failure carries significant financial or reputational consequence.