{"id":2510998,"url":"https://alion.io/job/fortinet-sr-applications-security-engineer","title":"Sr Applications Security Engineer","company":{"id":52696,"name":"Fortinet","domain":"fortinet.com","url":"https://alion.io/company/fortinet-blog","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Oracle","truth_index":{"grade":"A","score":87,"open_postings":169,"ghost_share":0,"stale_share":0.728,"repost_share":0,"time_to_fill_p50_days":2,"computed_at":"2026-10-15T05:46:00Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["Sunnyvale, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":147000,"max":180000,"currency":"USD","period":"year","gross":null,"usd_annual":180000},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":true,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Agentic Workflows","optional":false},{"name":"CI/CD","optional":false},{"name":"JavaScript","optional":false},{"name":"LLM","optional":false},{"name":"LLM Guardrails","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"Python","optional":false},{"name":"RAG","optional":false},{"name":"Red Teaming","optional":false},{"name":"STRIDE","optional":false},{"name":"Threat Modeling","optional":false}],"status":"live","first_seen_at":"2026-10-14T06:06:24Z","employer_posted_date":"2026-10-14","last_verified_at":"2026-10-16T02:05:30Z","board_verified":true,"closed_at":null,"days_open":1,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":1},"description":"Fortinet is looking for a Sr. Application Security Engineer to join the Corporate Information Security team. This is a highly technical role, with responsibilities conducting security reviews on various Fortinet applications, providing security education to our engineers and handling externally reported vulnerabilities.\nKey Responsibilities:\nServe as an application security subject matter expert who provides guidance to internal teams\nWork closely with development teams, perform code reviews, penetration tests, and architectural reviews on existing codes and new features.\nDevelop, implement, and communicate vulnerability mitigation strategies to development teams\nHandle externally reported vulnerabilities as a member of Corporate Information Security Responsible Disclosure Program committee. \nDrive Fortinet static and dynamic application security testing program.\nDevelop strategies, evaluate solutions, design and implement tools, processes and controls to ensure that security and privacy are designed in Fortinet applications\nAdvise development teams on SDLC best practices.\nProactively research new attack vectors on applications that may affect Fortinet applications and infrastructure.\nBe part of a global distributed team to share knowledge, workload and assignments. Strong sense of teamwork is required. Coach peers in application security concepts and best practices.\nRequired Skills/Experience:\n5+ years of work experience as an Information Security Researcher or Engineer\n3+ years of experience with manually auditing source code to find security issues or programming skills in one or more of: Java, .NET, Python or JavaScript frameworks.\nStrong understanding on OWASP TOP 10 vulnerabilities.\nStrong understanding of common API security risks\nStrong understanding on Cloud-Native application architecture, microservices, containerization technologies, secure deployment and implementation issues.\nProven experience in application penetration testing\nProven experience in security code review\nProven experience in application security testing (DAST, SAST, IAST, SCA) tools and processes\nStrong foundation in computer and network security, authentication & authorization, security protocols and applied cryptography\nSolid understanding with web security standards such as CSP, SOP, CORS, and emerging web security technologies.\nSolid understanding on CI/CD pipelines, build systems and DevSecOps principles.\nStrong understanding with AI&ML & LLM concepts like RAG, Agentic Workflows, MCPs, Skills, AI Red Teaming, AI Guardrails and Secure AI development and deployment strategies.\nExperience defining security architecture patterns and standards in a large enterprise organization.\nExperience with cloud-based security solutions and familiarity with cloud service providers, particularly in relation to application security\nExperience working with threat modeling methodologies such as MITRE ATT&CK, STRIDE, PASTA etc.\nUnderstanding of OAuth and JWT implementations.\nAbility to organize & communicate effectively, both written and verbal, with technical and non-technical people across functional teams\nA BS degree in Computer Science, Cyber Security, other tech-related degree, or equivalent experience.\nExperience in Cloud Security Posture Management (CSPM) and/or Application Security Posture Management (ASPM) tools is a plus. \nHaving OSWE OSCP, GWEB, GPEN or similar certificate is a plus\nExperience in Mobile Application Penetration Testing is a plus\nMust be authorized to work in the U.S. without sponsorship.\nThe US base salary range for this full-time position is $147,000-$180,000. Fortinet offers employees a variety of benefits, including medical, dental, vision, life and disability insurance, 401(k), 11 paid holidays, vacation time, and sick time, as well as a comprehensive leave program.\nWage ranges are based on various factors, including the labour market, job type, and job level. Exact salary offers will be determined by factors such as the candidate's subject knowledge, skill level, qualifications, experience, and geographic location.\nAll roles are eligible to participate in the Fortinet equity program. Bonus eligibility is reviewed at the time of hire and annually at the Company’s discretion.\nWhy Join Us:\nWe encourage candidates from all backgrounds and identities to apply. We offer a supportive work environment and a competitive Total Rewards package to support you with your overall health and financial well-being.\nEmbark on a challenging, enjoyable, and rewarding career journey with Fortinet. Join us in bringing solutions that make a meaningful and lasting impact to our 890,000+ customers around the globe.","description_format":"text","description_chars":4668,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":true},"security_clearance":false,"languages":[]},"benefits":["Equity"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Network Security","Endpoint Security","Information Security"],"lifecycle":[{"event":"open","at":"2026-10-14T08:54:21Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 125 · green card filings: 113","filings_12m":125,"filings_prev_12m":189,"green_card_filings_12m":113,"median_offered_wage_usd":157500,"route":null,"cap_exempt":false,"checked_at":"2026-10-15T11:24:14+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":4}],"liveness":{"score":53,"band":"ok","label":"Likely open","p_open":1,"p_active":0.592,"p_room":0.9,"age_days":0,"expected_fill_days":2,"reasons":["conf:2","stale_co","velocity","win:mid","comp:brand"],"computed_at":"2026-10-15T05:46:00Z"},"pay":{"stated_usd_annual":180000,"is_top_pay":true},"html_url":"https://alion.io/job/fortinet-sr-applications-security-engineer","json_url":"https://alion.io/job/fortinet-sr-applications-security-engineer.json","meta":{"generated_at":"2026-10-16T04:07:22Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":758,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-17T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":52696},"rest":"https://alion.io/mcp/rest/get_company?id=52696"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Ffortinet-sr-applications-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Ffortinet-sr-applications-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Ffortinet-sr-applications-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/fortinet-sr-applications-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Ffortinet-sr-applications-security-engineer"}]}