HiringCafe
Join our community

85 application security jobs at 52 companies in Olympia, WA

1mo
Save
Mark Applied
Hide
Application Security Engineer
Seattle or Miami
$195k-$244k/yr HybridFull Time
Opendoor
OpendoorNASDAQ: OPEN: Online platform for buying and selling residential real estate.
5+ YOE5+ years in application security or security-focused software engineering; strong coding skills in Python, Go, TypeScript, or Ruby; hands-on AppSec tooling experience (GitHub Advanced Security, Semgrep, etc.); cloud/container security (AWS, Kubernetes); threat modeling and automation skills.
Go, Python, TypeScript, Ruby, Terraform, AWS, GCP, Azure, Kubernetes, Apollo GraphQL, GitHub Advanced Security, CodeQL, Dependabot, secret scanning, Semgrep, HackerOne, Burp Suite, Cloudflare WAF, Claude, OpenAI, GitHub, Linear, Slack, MCP
Job PostingView all
1w
Save
Mark Applied
Hide
Lead Architect – Application Security
San Jose or Seattle
$298k-$446k/yr HybridFull Time
F5
F5NASDAQ: FFIV: Provides application delivery networking and multi-cloud security solutions.
20+ YOE20+ years in software/security architecture with 10+ years in application-layer security (WAAP, DDoS, API security, bot protection); deep protocol, TLS, identity, zero-trust, and cloud-native expertise.
HTTP/2, HTTP/3, WebSockets, gRPC, TLS, OAuth2, OIDC, SAML, Kubernetes, Istio, Envoy, MITRE ATT&CK, OWASP Top 10
Job PostingView all
1mo
Save
Mark Applied
Hide
Senior Application Security Analyst
Olympia, Washington, United States
$114k-$124k/yr HybridFull Time
Washington Health Benefit Exchange
Washington Health Benefit Exchange: Operates Washington state's health insurance enrollment marketplace.
7+ YOE7+ years in information security with application security, secure SDLC, DevSecOps, cloud/Azure experience; experience with code reviews, threat modeling, vulnerability management, and tools like Nessus, Rapid7, Nmap, and Burp Suite.
Microsoft Azure, Nessus, Rapid7, Nmap, Burp Suite, Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), Software Composition Analysis (SCA), CI/CD, OWASP, STRIDE, MITRE ATT&CK, Security Information and Event Management (SIEM), Endpoint Detection & Response
Job PostingView all
1mo
Save
Mark Applied
Hide
Senior Application Security Analyst
Olympia, Washington, United States
$114k-$148k/yr HybridFull Time
Washington State Department of Ecology
Washington State Department of Ecology: Provides environmental regulation and conservation services for Washington state.
7+ YOE7+ years information security experience in application security, vulnerability management, penetration testing or related areas; strong secure SDLC, cloud/DevSecOps, threat modeling, code review, and remediation skills; familiarity with NIST/OWASP and regulatory requirements.
Microsoft Azure, Nessus, Rapid7, Nmap, Burp Suite, SAST, DAST, SCA, STRIDE, MITRE ATT&CK, Security Information and Event Management (SIEM), Endpoint Detection & Response (EDR)
Job PostingView all
1mo
Save
Mark Applied
Hide
Senior Application Security Engineer
Seattle or Los Angeles or San Francisco or California or Colorado or Connecticut or Delaware or Hawaii or Illinois or Maine or Maryland or Massachusetts or Minnesota or Nevada or New Jersey or New York or Rhode Island or Virginia or Washington or Washington DC or United States
$141k-$259k/yr OnsiteFull Time
Nordstrom
Nordstrom: Operates luxury department stores and off-price retail outlets.
4+ YOE4+ years in application security or related field; experience shipping security tooling and automation; expert threat modeling, security design review, and manual code review; fluent reading/writing code in Java, Kotlin, C#, or Python; cloud-native and LLM/AI security knowledge.
Java, Kotlin, C#, Python, SAST, SCA, DAST, secrets scanning, GitHub Advanced Security, JFrog Artifactory, AWS, GCP, Azure, Kubernetes, LLM
Job PostingView all
1mo
Save
Mark Applied
Hide
Senior Application Security Engineer
United States or Canada or San Francisco or New York City or Seattle
$190k-$273k/yr RemoteFull Time
Apollo.io
Apollo.io: AI-powered platform for B2B sales intelligence and outreach automation.
5+ YOE5+ years software engineering or application security experience; strong coding skills (Ruby, Python), Linux and GCP familiarity, deep AppSec/vulnerability management, pen-testing and SAST experience, AI security, and strong communication.
Ruby, Python, Linux, GCP, SAST
Job PostingView all
2w
Save
Mark Applied
Hide
Staff Application Security Architect
Seattle or Detroit
$149k-$318k/yr OnsiteFull Time
Rocket Companies
Rocket CompaniesNYSE: RKT: Provides digital mortgage, real estate, and personal finance services.
5+ YOE10+ years in information security or 5+ with relevant degree; experience in threat modeling, secure coding, AppSec tooling, cloud/container security, and mentoring engineers.
STRIDE, DREAD, PASTA, Java, .NET, Python, PowerShell, Bash, SAST, DAST, SCA, Secret Scanning, OAuth 2.0, OIDC, SAML, Docker, Kubernetes, OWASP Top 10, ASVS, MITRE ATT&CK, CI/CD
Job PostingView all
2mo
Save
Mark Applied
Hide
Senior Application Security Engineer, AI & Product Security
Seattle, Washington, United States
$146k-$175k/yr HybridFull Time
Artera
Artera: AI-powered patient communication platform for healthcare organizations.
6+ YOE6–10 years in Application Security; hands-on engineering; experience with LLM/agent security, threat modeling, CI/CD security tooling, AWS (or cloud) security, regulated environments (HIPAA/FedRAMP/PCI).
SAST, DAST, SCA, CI/CD pipelines, Terraform, AWS, GCP, Azure, Zscaler
Job PostingView all
3w
Save
Mark Applied
Hide
Staff+ Application Security Engineer - M&A
San Francisco or Seattle or New York City
$320k-$485k/yr HybridFull Time
Anthropic
Anthropic: Developing safe and reliable artificial intelligence systems.
Hands-on application and infrastructure security experience, production-quality coding in Python/Go/Rust/TypeScript, threat-modeling, vulnerability ID, clear communication, and ability to assess unfamiliar codebases under time pressure.
Python, Go, Rust, TypeScript, Claude, SAST, DAST, LLMs, bug bounty
Job PostingView all
1w
Save
Mark Applied
Hide
Senior Associate, Application Security, DevSecOps
Birmingham or Bentonville or Phoenix or Tempe or Irvine or Los Angeles or Sacramento or San Diego or San Francisco or Santa Clara or Boulder or Denver or Hartford or Stamford or Washington or Fort Lauderdale or Jacksonville or Miami or Orlando or Tallahassee or Tampa or Atlanta or Des Moines or Boise or Chicago or Indianapolis or Louisville or Baton Rouge or New Orleans or Shreveport or Boston or Baltimore or Detroit or Minneapolis or Kansas City or St Louis or Jackson or Charlotte or Raleigh or Winston-Salem or Lincoln or Omaha or Montvale or Short Hills or Albuquerque or Las Vegas or Albany or Buffalo or Melville or New York or Rochester or Cincinnati or Cleveland or Columbus or Oklahoma City or Portland or Harrisburg or Philadelphia or Pittsburgh or Providence or Greenville or Knoxville or Memphis or Nashville or Austin or Dallas or Fort Worth or Houston or San Antonio or Salt Lake City or Ashburn or McLean or Richmond or Seattle or Milwaukee or Virginia Beach or El Segundo
$90k-$168k/yr OnsiteFull Time
KPMG
KPMG: Global professional services network providing audit, tax, and advisory.
4+ YOE4+ years application security/DevSecOps experience, familiarity with CI/CD, SAST/DAST, cloud (preferably Azure), programming in Java/C#/JavaScript/Python/SQL, strong threat modeling and risk assessment skills, and U.S. work authorization without sponsorship.
Java, C#, JavaScript, Python, SQL, CI/CD, SAST, DAST, Azure, OWASP
Job PostingView all
1mo
Save
Mark Applied
Hide
Senior Security Engineer, Product & Application Security
Seattle, Washington, United States
$165k-$215k/yr OnsiteFull Time
Metropolis
Metropolis: Computer vision technology for checkout-free parking and retail payments.
Experience in application and product security, DevSecOps/secure SDLC, cloud-native system security, CI/CD security tooling, strong scripting/software engineering skills, and ability to partner with engineering teams.
DevSecOps, CI/CD, APIs, AI/CV
Job PostingView all
2w
Save
Mark Applied
Hide
Senior Software Engineer, Application Security
Seattle, Washington, United States
$191k-$253k/yr OnsiteFull Time
Anduril Industries
Anduril Industries: Defense technology building autonomous military hardware and software.
5+ YOE5+ years building production software, strong Go and Python skills, experience with distributed systems and AWS, ability to interpret security tool output, and eligible to obtain U.S. Secret clearance.
Go, Python, AWS, SQS, Lambda, S3, ECR, CircleCI, GitHub Actions, Syft, Trivy, Grype, Semgrep, Terraform, OPA/Rego, Kubernetes, Nix
Job PostingView all
2mo
Save
Mark Applied
Hide
Product Security Engineer
San Francisco or New York or Seattle
$187k-$260k/yr HybridFull Time
Airtable
Airtable: No-code platform for building collaborative apps and business workflows.
4+ YOE4+ years in product/application security; strong CS background; proficient in JavaScript/TypeScript, Node.js; experience securing LLM integrations; strong communication of security risks; thrives in fast-paced environments.
JavaScript, TypeScript, Node.js, Web Frameworks, Security tooling
Job PostingView all
1w
Save
Mark Applied
Hide
Senior Security Engineer, Corporate Services Security
Boston or Seattle
$178k-$227k/yr OnsiteFull Time
Amazon
AmazonNASDAQ: AMZN: Global online retail and cloud computing technology provider.
5+ YOE5+ years identifying security issues and developing mitigations, 4+ years troubleshooting and scripting, experience with application security, threat modeling, code review, and mentoring; strong communication skills.
AWS
Job PostingView all
1mo
Save
Mark Applied
Hide
Senior Security Engineer
Seattle or San Francisco or United States
$145k-$200k/yr HybridFull Time
Sift
Sift: Provides AI-based fraud detection and digital trust software services.
5+ YOE5+ years in security/infrastructure/application security; hands-on with AWS or GCP; proficiency in Python/Go/Java; experience with SAST/DAST and SIEM; knowledge of secure system design, incident response, and AI/LLM security risks.
GCP, AWS, Python, Go, Java, SAST, DAST, SIEM, CI/CD, AI-powered scanning tools
Job PostingView all
2w
Save
Mark Applied
Hide
Security Engineer, GKE
Seattle, Washington, United States
$174k-$253k/yr OnsiteFull Time
Google
GoogleNASDAQ: GOOGL: Provides online search, advertising, cloud computing, and consumer electronics.
5+ YOEBachelor's degree or equivalent experience,5+ years security engineering and distributed cloud experience,3+ years with containerization/GKE,BLS? (not applicable) EMR? (not applicable),strong communication and critical thinking.
Google Kubernetes Engine (GKE), Kubernetes, Google Cloud Platform (GCP)
Job PostingView all
1mo
Save
Mark Applied
Hide
Manager, Security Engineering
Bellevue or Seattle
$183k-$229k/yr OnsiteFull Time
The Trade Desk
The Trade DeskNASDAQ: TTD: Cloud-based programmatic advertising platform for data-driven media buying.
2+ MgmtLeadership experience building security engineering teams; deep application and platform/cloud security expertise; experience with security program maturity, vulnerability management, and secure SDLC practices.
SAST, DAST, SCA, CSPM, MITRE ATT&CK, NIST, ISO 27001, ISO 27002, OWASP, CWE, AWS, GCP, Azure
Job PostingView all
3w
Save
Mark Applied
Hide
Senior Security Engineer (Product)
New York City or San Francisco or Seattle
$223k-$279k/yr HybridFull Time
Headway
Headway: Builds technology that helps therapists accept insurance and run their practice to increase access to mental health care.
5+ YOE5+ years security or software engineering experience, strong application and product security skills, experience with cloud and modern stacks, security reviews, incident response, and AI-native tooling.
Lacework, Python 3, TypeScript, FastAPI, SQLAlchemy, React, Postgres, Redis, AWS, Spark, Kafka, Datadog, PagerDuty, Github, Snyk, Semgrep
Job PostingView all
1mo
Save
Mark Applied
Hide
Senior Product Security Engineer
San Francisco or New York City or Seattle or Austin
$151k-$280k/yr OnsiteFull Time
Rippling
Rippling: Unified platform managing workforce HR, IT, and finance operations
5+ YOE5+ years product security experience, deep web application security, fluency in Python, React, Django Rest Framework, experience with code review, CI/CD application security, and mentoring engineering teams.
Python, React, Django Rest Framework, CI/CD, SSO, OAUTH, SAML, AWS
Job PostingView all
1mo
Save
Mark Applied
Hide
Principal Security Architect, Cloud & Infrastructure
Cambridge or Budapest or Chennai or Seattle or Tokyo or Zagreb
OnsiteFull Time
Cambridge Mobile Telematics
Cambridge Mobile Telematics: Providing telematics and behavioral analytics for safer driving and insurance.
7+ YOE7+ years security experience with hands-on application/product security architecture, threat modeling, secure SDLC, API/mobile security, experience influencing engineering teams, and working knowledge of AI/LLM security.
OWASP, LLM
Job PostingView all

Explore Jobs

Expand Your Job Search