23 appsec jobs at 21 companies in Seattle, WA

2d
Save
Mark Applied
Hide
Security Engineer, AppSec, Stores Security
Seattle, Washington, United States
$136k-$184k/yr OnsiteFull Time
Amazon
AmazonNASDAQ: AMZN: Global online retail and cloud computing technology provider.
2+ YOEBachelor's degree in engineering or computer science; security vulnerability, web protocol, application security, code review, testing, incident response, and scripting experience required.
Java, Python, JavaScript, AWS
1mo
Save
Mark Applied
Hide
Senior Security Engineer, Product AppSec
United States or Texas or Seattle
$198k-$368k/yr RemoteFull Time
Veeam
Veeam: Data resilience and security for hybrid cloud environments
8+ YOEUS citizens only. 8+ years in application/product security or DevSecOps, 3+ years SAST/DAST/SCA/IAST and vulnerability management experience, experience with CI/CD, cloud, IaC, scripting, secure SDLC, and API integrations.
GitHub Actions, Microsoft Azure DevOps, Jenkins, GitLab CI, Jira, SIEM, SAST, DAST, SCA, IAST, CSPM, Azure, AWS, GCP, Terraform, Kubernetes, Docker, SLSA, Sigstore, SBOM, Python, Bash, PowerShell, OPA, Gatekeeper, LinkedIn Learning, O’Reilly
3w
Save
Mark Applied
Hide
Staff Application Security Architect
Seattle or Detroit
$149k-$318k/yr OnsiteFull Time
Rocket Companies
Rocket CompaniesNYSE: RKT: Provides digital mortgage, real estate, and personal finance services.
5+ YOE10+ years in information security or 5+ with relevant degree; experience in threat modeling, secure coding, AppSec tooling, cloud/container security, and mentoring engineers.
STRIDE, DREAD, PASTA, Java, .NET, Python, PowerShell, Bash, SAST, DAST, SCA, Secret Scanning, OAuth 2.0, OIDC, SAML, Docker, Kubernetes, OWASP Top 10, ASVS, MITRE ATT&CK, CI/CD
1mo
Save
Mark Applied
Hide
Principal Software Engineer
Bellevue, Washington, United States
$197k-$314k/yr HybridFull Time
Salesforce
SalesforceNYSE: CRM: Sells cloud-based customer relationship management and business software solutions.
10+ YOE10+ years software development; proven enterprise SaaS experience; strong Java and/or Python; distributed systems on AWS; security and AppSec collaboration; automated testing experience; related technical degree required.
Java, Python, Kubernetes, AWS, gRPC, JUnit, pytest, Selenium, Playwright
4w
Save
Mark Applied
Hide
Security Engineer, Level 5
Los Angeles or Palo Alto or Bellevue or Santa Monica
$178k-$313k/yr OnsiteFull Time
Snap
SnapNYSE: SNAP: Develops social media applications and augmented reality technology.
6+ YOE6+ years security experience post-Bachelor's, expertise in infrastructure/enterprise/access/appsec/detection or abuse domains; experience with cloud, Kubernetes, IAM, CSPM, AI tools, threat modeling, and securing distributed systems.
Kubernetes, IAM, CSPM, AI tools, AI/ML
2mo
Save
Mark Applied
Hide
Senior Application Security Engineer
United States or Canada or San Francisco or New York City or Seattle
$190k-$273k/yr RemoteFull Time
Apollo.io
Apollo.io: AI-powered platform for B2B sales intelligence and outreach automation.
5+ YOE5+ years software engineering or application security experience; strong coding skills (Ruby, Python), Linux and GCP familiarity, deep AppSec/vulnerability management, pen-testing and SAST experience, AI security, and strong communication.
Ruby, Python, Linux, GCP, SAST
2mo
Save
Mark Applied
Hide
Enterprise Account Manager
Los Angeles or San Francisco or Seattle
$280k-$320k/yr RemoteFull Time
Checkmarx
Checkmarx: Provides enterprise-grade application security testing and risk management software.
3+ YOEProven enterprise SaaS sales track record (3+ years), pipeline generation, channel and account management experience, MEDDIC/Force Management practitioner, experience selling to CISO/AppSec/engineering buyers, and Salesforce/CRM proficiency.
Checkmarx One, Salesforce, CRM, MEDDIC, Force Management
1w
Save
Mark Applied
Hide
Strategic Channel Partnerships Manager, West
San Francisco or San Diego or Seattle or Denver or Austin
$250k-$270k/yr RemoteFull Time
GitGuardian
GitGuardian: Provides automated secrets detection and non-human identity security solutions.
8+ YOE8+ years channel sales/partner management in cybersecurity, proven partner-sourced pipeline and quota attainment, strong relationships with solution providers, co-selling experience, knowledge of AppSec/DevSecOps/Identity/Cloud security, executive presence.
3w
Save
Mark Applied
Hide
Staff Security Engineer, Product Security and Architecture
Seattle, Washington, United States
$210k-$234k/yr OnsiteFull Time
Compass
CompassNYSE: COMP: Technology-enabled residential real estate brokerage and agent software platform.
3+ YOE3+ years administering CI/CD and appsec tools, scripting in Python/Bash, product development and code review experience in Python/JS/TS/Golang/Java, Terraform and AWS experience, and experience using AI for security workflows.
CI/CD, SAST, DAST, SCA, Python, Bash, JavaScript, TypeScript, Golang, Java, Terraform, AWS, AI, Web Application Firewalls (WAF), API Gateways, OAuth2/OIDC
1mo
Save
Mark Applied
Hide
Application Security Engineer
Seattle or Miami
$195k-$244k/yr HybridFull Time
Opendoor
OpendoorNASDAQ: OPEN: Online platform for buying and selling residential real estate.
5+ YOE5+ years in application security or security-focused software engineering; strong coding skills in Python, Go, TypeScript, or Ruby; hands-on AppSec tooling experience (GitHub Advanced Security, Semgrep, etc.); cloud/container security (AWS, Kubernetes); threat modeling and automation skills.
Go, Python, TypeScript, Ruby, Terraform, AWS, GCP, Azure, Kubernetes, Apollo GraphQL, GitHub Advanced Security, CodeQL, Dependabot, secret scanning, Semgrep, HackerOne, Burp Suite, Cloudflare WAF, Claude, OpenAI, GitHub, Linear, Slack, MCP
2mo
Save
Mark Applied
Hide
Senior Application Security Analyst
Olympia, Washington, United States
$114k-$124k/yr HybridFull Time
Washington Health Benefit Exchange
Washington Health Benefit Exchange: Operates Washington state's health insurance enrollment marketplace.
7+ YOE7+ years in information security with application security, secure SDLC, DevSecOps, cloud/Azure experience; experience with code reviews, threat modeling, vulnerability management, and tools like Nessus, Rapid7, Nmap, and Burp Suite.
Microsoft Azure, Nessus, Rapid7, Nmap, Burp Suite, Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), Software Composition Analysis (SCA), CI/CD, OWASP, STRIDE, MITRE ATT&CK, Security Information and Event Management (SIEM), Endpoint Detection & Response
1w
Save
Mark Applied
Hide
Sr. IT Application Security Engineer
Kirkland or San Jose
$120k-$150k/yr OnsiteFull Time
Monolithic Power Systems
Monolithic Power SystemsNasdaq: MPWR: Provides energy-efficient integrated power semiconductor solutions for electronics.
3+ YOEDesign and manage application security and RBAC for Dynamics 365, Azure, and IFS; perform assessments, code reviews, threat modeling; 3+ years application security experience; bachelor\u0002s or equivalent; security certs a plus.
Microsoft Dynamics 365, Azure Active Directory, IFS ERP, PowerShell, Python, SAST, DAST, CI/CD, OWASP, NIST, ISO 27001
3w
Save
Mark Applied
Hide
Senior Associate, Application Security, DevSecOps
Birmingham or Bentonville or Phoenix or Tempe or Irvine or Los Angeles or Sacramento or San Diego or San Francisco or Santa Clara or Boulder or Denver or Hartford or Stamford or Washington or Fort Lauderdale or Jacksonville or Miami or Orlando or Tallahassee or Tampa or Atlanta or Des Moines or Boise or Chicago or Indianapolis or Louisville or Baton Rouge or New Orleans or Shreveport or Boston or Baltimore or Detroit or Minneapolis or Kansas City or St Louis or Jackson or Charlotte or Raleigh or Winston-Salem or Lincoln or Omaha or Montvale or Short Hills or Albuquerque or Las Vegas or Albany or Buffalo or Melville or New York or Rochester or Cincinnati or Cleveland or Columbus or Oklahoma City or Portland or Harrisburg or Philadelphia or Pittsburgh or Providence or Greenville or Knoxville or Memphis or Nashville or Austin or Dallas or Fort Worth or Houston or San Antonio or Salt Lake City or Ashburn or McLean or Richmond or Seattle or Milwaukee or Virginia Beach or El Segundo
$90k-$168k/yr OnsiteFull Time
KPMG
KPMG: Global professional services network providing audit, tax, and advisory.
4+ YOE4+ years application security/DevSecOps experience, familiarity with CI/CD, SAST/DAST, cloud (preferably Azure), programming in Java/C#/JavaScript/Python/SQL, strong threat modeling and risk assessment skills, and U.S. work authorization without sponsorship.
Java, C#, JavaScript, Python, SQL, CI/CD, SAST, DAST, Azure, OWASP
1mo
Save
Mark Applied
Hide
Software Development Manager
Seattle or Monroe
$185k-$210k/yr HybridFull Time
Card Kingdom
Card Kingdom: Sells collectible trading cards and operates gaming-themed restaurants.
10+ YOE3+ Mgmt10+ years building software with 3+ years senior IC experience and 3–5+ years managing engineering teams; strong e‑commerce experience; hands‑on technical depth across full‑stack web stacks; on‑call/incident experience; bachelor's or equivalent.
PHP, Laravel, MySQL, Elasticsearch, JavaScript, TypeScript, NGINX, AWS, OWASP
1mo
Save
Mark Applied
Hide
Principal Security Architect, Cloud & Infrastructure
Cambridge or Budapest or Chennai or Seattle or Tokyo or Zagreb
OnsiteFull Time
Cambridge Mobile Telematics
Cambridge Mobile Telematics: Providing telematics and behavioral analytics for safer driving and insurance.
7+ YOE7+ years security experience with hands-on application/product security architecture, threat modeling, secure SDLC, API/mobile security, experience influencing engineering teams, and working knowledge of AI/LLM security.
OWASP, LLM
5d
Save
Mark Applied
Hide
Sr Engineers, Software
Bellevue, Washington, United States
$212k-$217k/yr HybridFull Time
T-Mobile
T-MobileNASDAQ: TMUS: Provides wireless voice, data, and mobile internet services.
3+ YOEMaster’s degree and 3 years of relevant experience, or bachelor’s degree and 5 years. Requires Java, Spring Boot, JavaScript, TypeScript, Adobe Experience Manager, REST, Docker, Kubernetes, CI/CD, and cloud monitoring experience.
Java, Spring Boot, JavaScript, TypeScript, Adobe Experience Manager, HTL (Sightly), Sling Models, OSGi, JCR, Content Fragments, Experience Fragments, Dispatcher, JPA, Hibernate, Spring Security, JWT, OAuth2, JUnit, Mockito, Alpine.js, HTML, CSS, Flexbox, Grid, Webpack, Vite, WCAG 2.1 AA, GitLab, Docker, Kubernetes, Splunk, Splunk Observability, OpenTelemetry, OWASP, CSRF, XSS, Checkstyle, ESLint, TTFB, CLS, LCP
3w
Save
Mark Applied
Hide
Cleared Penetration Tester
Herndon or Seattle
$130k-$160k/yr HybridFull Time
Fortreum
Fortreum: Provides cybersecurity compliance and technical auditing services for regulated industries.
3+ YOEActive Top Secret clearance or ability to obtain,3+ years web application and network penetration testing,2+ years professional services experience,proficient with scripting (bash,python,PowerShell,ruby),knowledge of OWASP/MITRE ATT&CK/OSSTMM/PTES.
bash, python, PowerShell, ruby, OWASP, MITRE ATT&CK, OSSTMM, PTES
2w
Save
Mark Applied
Hide
Staff AI Security Engineer
Bellevue or Chicago or New York City or San Francisco or Washington
$161k-$248k/yr HybridFull Time
Okta
OktaNASDAQ: OKTA: Provide secure identity management and authentication for enterprises.
8+ YOE8+ years in security engineering or backend development, expertise in AI threat landscape, strong coding in Python or Go, cloud (AWS/GCP) experience, and leadership/mentorship ability.
Python, Go, LangChain, Strands, Claude Agent SDK, AWS, GCP, OWASP, MITRE ATLAS, NIST AI RMF
3w
Save
Mark Applied
Hide
Senior IT Auditor
Seattle, Washington, United States
$96k-$120k/yr HybridFull Time
University of Washington
University of Washington: Provides higher education and comprehensive academic healthcare services.
5+ YOEBachelor's degree,5+ years audit experience including 3+ years IT audit or technical equivalent,professional certification such as CISA/CISSP/CISM,knowledge of COBIT/NIST/OWASP and IT controls,ability to perform computer forensics and data analytics.
COBIT, NIST, OWASP, Workday, Epic, SQL, Tableau, ACL
2mo
Save
Mark Applied
Hide
Manager, Security Engineering
Bellevue or Seattle
$183k-$229k/yr OnsiteFull Time
The Trade Desk
The Trade DeskNASDAQ: TTD: Cloud-based programmatic advertising platform for data-driven media buying.
2+ MgmtLeadership experience building security engineering teams; deep application and platform/cloud security expertise; experience with security program maturity, vulnerability management, and secure SDLC practices.
SAST, DAST, SCA, CSPM, MITRE ATT&CK, NIST, ISO 27001, ISO 27002, OWASP, CWE, AWS, GCP, Azure