Senior Security Engineer, Application Security

At Handshake, we believe security should be built into the product, not layered on after the fact. We're looking for a Senior Application Security Engineer who’s excited to shape how security shows up in the developer experience, and enable our engineering teams to ship secure code without compromising on velocity.

As a Senior Application Security Engineer, you'll play a critical role in protecting Handshake’s users and their data. You'll work closely with our engineering, platform, and cloud teams to make the secure way the easy way and embed security directly into how software gets designed, written, and shipped.

This role is on our Cloud Security squad on our Infra & Platform team and is an engineering forward role. You’ll be building systems, tools, and automation that make secure development the default. You’ll bring a modern, opinionated perspective on how application security should work in a cloud-native, AI-enabled environment.

• →

  Own and grow key areas of our Secure Software Development Lifecycle (SDLC) like threat modeling, security reviews, and vulnerability management.

• →

  Work collaboratively with and be a trusted partner for engineering teams.

• →

  Eliminate whole classes of vulnerabilities by building secure by default libraries and tools into our platform.

• →

  Raise the bar for security awareness by teaching others and sharing your knowledge through

• →

  Design and build developer facing tooling to help engineers identify and fix security issues before they make it to production.

• →

  Scale your impact and security knowledge by teaching others, automating processes, and leveraging AI and agentic tooling.

• →

  Balance security and speed by using your judgement and expertise to add the right amount of security to our SDLC.

• →

  Help respond to potential security incidents as a member of the security on-call rotation.

• A builder mindset and experience working on large codebases and safely shipping code to production.

• Strong understanding of common application security risks (OWASP Top 10) and how to mitigate them.

• A pragmatic and empathetic approach to security controls that favors guidance over blocking and influence over mandates.

• Strong communication skills and the ability to communicate security risks and tradeoffs to both technical and non-technical audiences.

• Experience with threat modeling and risk assessments.

• Familiarity with securing and running software in a major cloud provider.

• Curiosity and a desire to use AI and agenting tooling to scale your and the security team’s impact.

• Experience working in Google Cloud (GCP)

• Experience writing production code in the most popular languages at Handshake: Ruby, Typescript and Go.

• Experience building agentic systems to solve security problems.

You’ll have real ownership over how application security is built and scaled at Handshake. This role sits at the intersection of security, developer experience, and AI, with the opportunity to define how all three come together. As part of a fast paced and growing business you will regularly get to work on new and interesting problems.

If you care about building systems (not just processes), enjoy working closely with engineers, and want to rethink what modern application security looks like, we’d love to hear from you.