Required Senior Application Security Engineer
As a Senior Application Security Engineer, youll plan, build, and support efforts to strengthen security across the organization. As part of our Security & Platform organization, youll work across the software development lifecycle and the underlying cloud and platform environment.
Youll own application security throughout the SDLC, including security requirements, threat modeling, secure design reviews, code reviews, application and API security testing, and production hardening. The role combines application security, cloud and platform security, and security automation. Youll partner closely with Security, Engineering, Platform, DevOps, and IT teams to build secure-by-default systems and reduce risk at scale.
Youll also define and report meaningful security metrics, including control coverage, vulnerability trends, remediation timelines, security exceptions, and baseline compliance. This is a hands-on engineering role for someone who can move comfortably between architecture and threat modeling, code and API reviews, cloud and identity guardrails, CI/CD security controls, vulnerability remediation, and automation.
Responsibilities
Define, track, and report meaningful security metrics, including control coverage, vulnerability trends, remediation timelines, security exceptions, and baseline compliance.
Own application security across the SDLC, from security requirements and threat modeling through secure design, code reviews, testing, and production hardening.
Strengthen cloud and platform security by implementing scalable security controls, identity guardrails, and secure-by-default practices.
Partner closely with Security, Engineering, Platform, DevOps, and IT teams to reduce security risk and improve security practices across the organization.
Designing controls for multi-account or multi-cloud environments using Terraform, policy-as-code technologies such as OPA or Sentinel, or automated remediation workflows.
Experience running a Security Champions, bug bounty or responsible disclosure program, or delivering hands-on secure engineering training.
You'll translate technical risk into clear remediation guidance and influence engineering and leadership stakeholders through strong written and verbal communication.

We are seeking a Senior Application Security Engineer with profound expertise in application security. In this role, you will execute fundamental AppSec tasks, including threat modeling, secure design reviews, code evaluation, and vulnerability management, leveraging both manual methods and advanced AI tooling. You will also help secure the AI systems Unity itself is building, including agentic tools and AI-assisted development workflows.

You will work directly with engineering teams across the US and EMEA.

What you will do
Lead threat modeling, secure design reviews, and penetration testing for Unity products and services, from the engine and editor to cloud services, APIs, and internal platforms.

Perform deep code review and manual testing on high-risk systems, using AI-assisted review processes and covering areas automated tooling cannot fully reach.

Build and operate security automation. Use and extend AI-assisted tooling for continuous code review, finding triage, and automated penetration testing, and step in where human judgment is required.

Secure AI and agentic systems. Assess AI-native products, LLM integrations, and agent workflows for the risks specific to them.

Partner with engineering teams to drive remediation, turning recurring findings into guardrails, secure defaults, and paved paths.

Investigate and respond to application security incidents, including root cause analysis and durable corrective action.

Contribute to secure development lifecycle and to compliance work.

Were growing and looking to hire a Senior Security Operations Engineer who embodies our core values: People First, Customer Obsession, Strive for Excellence, and Integrity.
About the Company:
A global leader in cyber-physical systems (CPS) protection, dedicated to securing the critical infrastructure that keeps the world running. Were a fast-growing, award-winning team where innovation meets purpose-and we want you to help us define the future of cybersecurity.
About the Role:
In this role, you will be a key architect and operator of our modern security posture, focusing heavily on Cloud Access Security Broker (CASB/SSE) architecture, next-generation Endpoint Detection & Response (EDR), and securing the deployment and usage of Artificial Intelligence (AI) and Large Language Models (LLMs) across the enterprise.
As threats evolve, we are proactively embedding AI-driven defense mechanisms while managing the unique threat vectors introduced by enterprise AI adoption. If you thrive at the intersection of data protection, cloud edge security, and cutting-edge automation, this position offers an exceptional opportunity to impact our global defense strategy.
Responsibilities
As a Senior Security Operations Engineer, your responsibilities will include:
Engineering level oversight and support of the operational security environment including endpoint security, cloud/SaaS security, email security, AI security, and network security.
Design, implement, and maintain security solutions for on-premises and cloud environments (e.g., AWS, Azure, GCP).
Architect, configure, and maintain Security Service Edge (SSE), including CASB, Next-Gen SWG, and ZTNA. Establish data loss prevention (DLP) profiles, threat protection policies, and granular access controls across multi-cloud and SaaS environments.
Assist in responses to internal and external compliance audits, penetration tests and vulnerability assessments.
Provide recommendations regarding direction of systems and applications to help secure access, data and assets.
Research and analyze Security Operations Center (SOC) related cyber threats , alerts, and vulnerabilities and ensure our systems are properly protected.
Conduct research on emerging products, services, protocols, and standards relative to the information security arena.
Work with IT Security product vendors and service providers, to evaluate potential security offerings, including product evaluations, pilots and proof of concept installations
Ability to understand and troubleshoot cyber security issues, network configurations, system configurations and upgrades, user authentication, etc..
Ability to work well with other technology areas to deploy security technologies.
Customer service-oriented
Strong work ethic and sense of urgency
Develop and maintain security architecture diagrams, documentation, and standards.

We are seeking an experienced Security Engineering Lead to join the Cyber Security organization, reporting to the Corporate Security Engineering Manager under the CISO.

This is a senior technical lead role focusing on engineering and execution without direct people management responsibilities. This role combines hands-on security engineering to deliver end-to-end protection across corporate, cloud, and SaaS environments. You will not only define strategy and standards - you will build, configure, tune, and operate the technical controls that enforce them.

You will be responsible for implementing, managing, integrating and maintaining security systems across the organizations IT landscape. The role requires deep technical proficiency in multiple platforms and tools, combined with the ability to collaborate with Security, IT, Engineering, Product, GRC and other business units to reduce risks and embed strong security practices.

Your responsibilities will include:

Engineer, deploy, and continuously tune systems such as Identity & Access, Threat Detection & Response, Cloud & Network Security.
Define, enforce and maintain security policies & configurations across endpoints, email, SaaS, network, and cloud platforms.
Design and implement solutions to gain continuous visibility into systems and processes, sensitive data, data flows, misconfigurations, and exposure risks across cloud and multi-cloud environments.
Monitor, triage, and investigate security alerts and risks, collaborating with Security, IT, Network teams on escalation and remediation.
Conduct risk assessments and identify gaps in security controls across systems, pipelines, and business processes.
Support compliance and regulatory requirements (e.g., GDPR, ISO 27001, SOC 2) related to security and privacy.
Collaborate with Engineering, IT, Product, and GRC teams to embed security controls into systems, and workflows.
Maintain documentation, runbooks, and guidelines for operations, security posture management, and security practices.

We're looking for a Security Engineer - our company Product to spread the power of our company. The ideal candidate will have experience performing security reviews, vulnerability management, and detection and response operations in cloud-native environments. Youll get to collaborate with our software development and DevOps teams to secure our companys products, CI/CD infrastructure, and production infrastructure. Youll also have the opportunity to influence our product roadmap by utilizing our company-for-our company to assess, monitor, and harden our environments.
Responsibilities
Lead threat modeling and security design reviews with R&D and Product teams - identifying and mitigating architecture risks early in the development lifecycle.
Drive vulnerability management and remediation - actively writing IaC (Terraform), submitting code PRs, and developing security automations (Python/Go) to resolve risks.
Extend cloud detection and response capabilities - authoring detection rules, monitoring cloud environments, and investigating live security incidents across our production infrastructure
Act as "Customer Zero" by leveraging our company to protect our company- dogfooding new product features in our massive multi-cloud environment and directly shaping the product roadmap.
Partner with our DevOps and our company Federal teams - hardening CI/CD pipelines, container/Kubernetes infrastructure, and extending security controls to FedRAMP environments.
Enable engineering teams to deliver secure-by-design cloud and AI solutions without slowing down development velocity.

Were looking for an experienced, multidisciplinary Security Engineer with a strong technical foundation and the ability to learn and own new technologies and domains from the ground up.Youll join Corporate Security Engineering within our Cyber Defense organization, Youll design, implement, and mature the security controls that protect our business applications, workforce, and corporate environment.
Youll work closely with Cyber Defense, IT, DRE, R&D, People, Legal, and GRC to embed security controls at scale. Our strategy is AI-first and built on identity-centric controls, Zero Trust principles, and scalable automation.
Youll Own
The security posture of our corporate technology stack, including AI security, identity, DLP and insider risk, EDR, MDM, browser security, SSPM/CASB, network security, and email and collaboration security.
Zero Trust access policies for workforce and external users, along with hardening for macOS, Windows, and Linux endpoints, browsers, SaaS applications, and corporate networks.
Identity and access capabilities, including SSO, phishing-resistant MFA, passwordless authentication, conditional access, device trust, PAM, joiner-mover-leaver controls, and service-account hygiene.
The evaluation and rollout of new security technologies, taking solutions from proof of concept through production.
Automated workflows and API integrations that scale security controls without adding operational overhead or headcount.
SaaS, third-party, and AI governance, including SaaS configuration reviews, vendor security assessments, access reviews, OAuth governance, posture remediation, and enablement-first guardrails for employee AI tools.
Domain expertise for SecOps incident response and partnership with IT and R&D to embed security standards and operating procedures into day-to-day processes.
Youll Solve
How to protect a fast-growing SaaS companys corporate environment across a broad and evolving technology stack.
How to translate security risks into clear requirements, practical controls, and reliable production operations.
How to strengthen identity, endpoint, SaaS, network, email, and collaboration security through a unified Zero Trust approach.
How to automate security processes and integrate systems so controls remain effective as we scale.
How to enable employees to use SaaS and AI tools safely through thoughtful guardrails rather than blanket restrictions.
How to make security standards easy for partner teams to adopt by embedding them into operational workflows and SOPs.
Youll Impact
The security and resilience of our business applications, workforce, and corporate environment.
Our ability to scale securely through stronger identity-centric controls, Zero Trust access, endpoint hardening, and SaaS governance.

We seek a dynamic and experienced Cyber Security Engineer to join Tipalti! This role presents an exciting opportunity to work in a fast-growing company with great opportunities to make a difference.
In this role, you will be responsible for:
Design, implement, and maintain security architectures and controls across the organization's Cloud, SaaS, AI, and Corporate environments.
Secure enterprise infrastructure by strengthening cloud security, protecting sensitive data, managing identity and access, and continuously improving the organization's security posture.
Deploy, operate, and optimize enterprise security technologies across Identity, Endpoint, Network, Email, Cloud, SaaS, Data Protection, and Security Operations domains.
Identify, prioritize, and remediate security risks, vulnerabilities, cloud exposures, and SaaS security findings.
Lead end-to-end security projects across multiple teams, collaborating with Engineering, DevOps, IT, and Security Operations to implement scalable security solutions and drive automation.
Support the secure adoption of AI technologies while ensuring security controls align with industry best practices and frameworks such as ISO 27001, SOC 2, NIST CSF, and CIS Controls.

This role is responsible for leading the organizations security architecture across corporate networks and cloud environments, ensuring secure design and implementation of enterprise infrastructure at scale.

The ideal candidate combines deep expertise in network and cloud security with strong leadership capabilities. You will define and drive security architecture across hybrid environments, working closely with IT, Infrastructure, Network, DevOps, and Security teams to ensure robust, scalable, and resilient security controls.

Your responsibilities will include:

Lead and manage the security architecture domain, including security architects and/or senior engineers.
Define and maintain security architecture standards, guidelines, and reference designs across corporate and cloud environments.
Act as the primary authority on enterprise security architecture across networks, identity, endpoints, and cloud platforms.
Design and evolve secure enterprise network architectures, including segmentation, Zero Trust, and hybrid connectivity.
Define and enforce security controls for corporate networks, data centers, and remote access solutions (ZTNA, proxies, NAC).
Lead architecture and selection of network security technologies (e.g., firewalls, secure gateways, access control solutions).
Lead security architecture across cloud platforms and hybrid environments.
Define secure reference architectures for cloud networking, identity, and workload protection.
Ensure proper implementation of cloud security controls, including IAM, segmentation, encryption, and monitoring.
Define security architecture for endpoints and identity, including EDR/XDR, device hardening, SSO, MFA, and privileged access.
Ensure secure baseline configurations and access control mechanisms across corporate and cloud environments.
Identify architectural risks and security gaps and drive mitigation strategies across infrastructure and cloud environments.
Establish and enforce architecture review processes and governance for new systems and changes.
Collaborate with SOC, Vulnerability Management, IT, and Infrastructure teams to improve overall security posture.
Contribute to the cyber security strategy and roadmap, including adoption of modern models such as Zero Trust.