Security Engineer, Application Security

About the role

Saronic Technologies is building autonomous maritime platforms and needs a Security Engineer to embed application security across its product, cloud, and enterprise systems. You will own the security of the software development lifecycle and supply chain, enabling fast, safe releases.

Key responsibilities

• Run threat modeling, secure design reviews, and code reviews for new and existing applications.
• Integrate SAST, DAST, and SCA tools into CI/CD pipelines with developer‑friendly gates.
• Manage software supply‑chain security, including SBOM creation, artifact signing, and dependency risk reduction.
• Govern secrets management, application allow‑listing/block‑listing, and data‑loss‑prevention controls.
• Design and harden self‑hosted infrastructure on AWS, Azure, and on‑prem, providing hardened images, network isolation, identity management, patching, and monitoring.
• Collaborate with engineering, DevOps, and platform teams to embed security as the default.

Required profile

• 5+ years of experience in application security, DevSecOps, or product security.
• Hands‑on experience with secure SDLC practices, threat modeling, and code review.
• Proven ability to implement SAST, DAST, and SCA in CI/CD pipelines.
• Experience securing software supply chains and managing secrets.
• Comfortable scripting and using Infrastructure‑as‑Code to build reusable tooling.
• Ability to obtain and maintain a U.S. security clearance.

Required skills

• Threat modeling
• Secure code review
• SAST, DAST, SCA
• CI/CD pipeline integration
• Software Bill of Materials (SBOM)
• Artifact signing
• Secrets management
• Hardened container images
• Network isolation
• Identity and access management
• Patching and monitoring
• Scripting (e.g., Python, Bash)
• Infrastructure‑as‑Code (e.g., Terraform)
• Container security
• Cloud security (AWS, Azure)