{"id":3612864,"url":"https://alion.io/job/nasuni-senior-security-engineer-application-security","title":"Senior Security Engineer - Application Security","company":{"id":3836,"name":"Nasuni","domain":"nasuni.com","url":"https://alion.io/company/nasuni","size_band":"11-50","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"A","score":88,"open_postings":10,"ghost_share":0,"stale_share":0.5,"repost_share":0,"time_to_fill_p50_days":52,"computed_at":"2026-11-03T05:54:40Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"posting_text","remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["United States"],"countries":["US"],"hiring_countries":["US"],"hiring_countries_total":1,"salary":null,"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"CI/CD","optional":false},{"name":"Kubernetes","optional":false},{"name":"Linux","optional":false},{"name":"OWASP","optional":false},{"name":"SBOM","optional":false},{"name":"Threat Modeling","optional":false},{"name":"AI Agents","optional":true},{"name":"LLM","optional":true}],"status":"live","first_seen_at":"2026-11-02T12:39:09Z","employer_posted_date":"2026-11-02","last_verified_at":"2026-11-04T00:27:16Z","board_verified":true,"closed_at":null,"days_open":1,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":1},"description":"Senior Security Engineer - Application Security\nLocation: United States - Remote | Department: Security | Reports to: Chief Information Security Officer\nRole overview\nNasuni is seeking a Senior Security Engineer specializing in application security and penetration testing to protect our growing portfolio of enterprise data infrastructure and SaaS products. You will identify and validate vulnerabilities, conduct penetration tests, guide secure design decisions, and work with Engineering to remediate and retest findings across Nasuni products, Resilio, DryvIQ, cloud services and emerging AI-enabled capabilities.\nScope and impact\nYou will independently execute complex security assessments, coordinate assigned testing initiatives, and recommend risk-based priorities within established security standards. This hands-on role combines technical judgment, practical automation, and cross-functional influence.\nResponsibilities\nConduct threat modeling, secure design and targeted code reviews for web applications, APIs, cloud services and appliances.\nPerform manual and tool-assisted penetration testing; document reproducible findings and verify fixes.\nCoordinate external penetration-test scoping, execution, report quality review, remediation tracking and retesting.\nValidate customer-reported vulnerabilities and advise Engineering on prioritization, mitigation and closure.\nImprove SAST, SCA, secrets detection, container scanning and CI/CD security workflows with engineering partners.\nSupport SBOM and software supply-chain vulnerability impact analysis.\nAssess AI-enabled product features for access-control weaknesses, prompt injection and unintended data exposure.\nUse approved AI-assisted tools for test planning, code analysis and research; independently verify outputs and protect confidential data.\nShare practical security guidance and improve repeatable assessment processes.\nMust-have qualifications\nApproximately 5+ years of relevant security engineering experience with substantial hands-on AppSec or penetration testing.\nDemonstrated manual testing of web applications and APIs, including authentication and authorization issues.\nExperience with threat modeling, secure code review, vulnerability validation and remediation retesting.\nExperience coordinating third-party penetration tests and reviewing technical findings.\nPractical knowledge of OWASP guidance, security testing tools and application security controls in the SDLC.\nAbility to read code and automate tasks using a relevant programming or scripting language.\nWorking knowledge of cloud services, Linux, containers or Kubernetes; effective technical communication.\nPreferred qualifications\nEnterprise SaaS, hybrid-cloud or appliance security experience.\nSBOM, CycloneDX/SPDX, supply-chain security and CI/CD tooling experience.\nLLM or agentic feature testing, M&A assessments, or audit evidence preparation.\nOSCP, GWAPT, GPEN, GWEB, CSSLP or equivalent demonstrated skills.\nIdeal differentiators\nIndependently discovered complex flaws and verified remediation; improved repeatable security workflows; balanced risk across SaaS and hybrid infrastructure; responsibly applied AI-assisted analysis with demonstrable validation.\nExperience guidelines\nFive or more years of relevant experience is typical, with meaningful direct responsibility for application security assessments. Equivalent demonstrated expertise is valued. A related degree or equivalent practical experience is welcome.\nSuccess measures\n90 days: establish findings, testing environment and remediation visibility. Six months: deliver risk-based internal testing and improve threat-modeling consistency. Twelve months: coordinate the annual external assessment and show measurable remediation progress.\nAbout Nasuni\nNasuni is the unstructured data foundation for enterprise teams-and the AI that supports them. We manage, protect, and activate the world’s unstructured data so organizations can work smarter, spend wisely, and create safely without limits. As a Vista-backed SaaS data infrastructure company, Nasuni is transforming how enterprises manage file data with a next-generation, AI-ready platform-turning massive file stores into secure, actionable, and AI-ready data for intelligent automation, analytics, and global collaboration.\nWhy work at Nasuni? \nAs part of our commitment to your well-being, we are pleased to offer comprehensive benefits packages to employees across the US. Benefits packages generally include: \n Best in class employee onboarding and training\n \"Take What You Need” paid time off policy\n Comprehensive health, dental and vision plans\n Company-paid life and disability insurance\n 401(k) and Roth IRA retirement plan\n Generous employee referral bonuses\n Flexible remote work policy\n 10 Paid Holidays\n Wide array of wellbeing offerings\n Pre-tax savings accounts with company contributions\n Great team culture and social activities\n Collaborative workspaces\n Free on-site fitness centers and stocked kitchens in select office locations\n Professional development resources\nCompensation Transparency: \nIn accordance with U.S. pay transparency laws, Nasuni is committed to providing visibility into compensation for all U.S.-based roles. Click HERE to view our compensation ranges by job grade. Actual compensation will be based on a variety of factors, including a candidate’s experience, skills, education, and work location.\nTo all recruitment agencies: Nasuni does not accept agency resumes. Please do not forward resumes to our job boards, Nasuni employees or any other company location. Nasuni is not responsible for any fees related to unsolicited resumes.\nNasuni is an equal opportunity employer. The equal employment opportunity policy at Nasuni protects employees and job applicants from discrimination on the bases of race, religion, color, sex (including pregnancy, gender identity, and sexual orientation), parental status, national origin, age, disability, family medical history or genetic information, political affiliation, military service, or other non-merit based factors. These protections extend to all management practices and decisions, including recruitment and hiring practices, appraisal systems, promotions, and training and career development programs. \nThis privacy notice relates to information collected (whether online or offline) by Nasuni Corporation and our corporate affiliates (collectively, “Nasuni”) from or about you in your capacity as a Nasuni employee, independent contractor/service provider or as an applicant for an employment or contractor relationship with Nasuni.","description_format":"text","description_chars":6595,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Professional development","Retirement plans"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Application Security","Cloud Storage & File Sharing","Backup & Disaster Recovery"],"lifecycle":[{"event":"open","at":"2026-11-02T15:04:47Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 1","filings_12m":1,"filings_prev_12m":10,"green_card_filings_12m":0,"median_offered_wage_usd":177500,"route":null,"cap_exempt":false,"checked_at":"2026-10-29T16:27:21+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":0}],"liveness":{"score":63,"band":"ok","label":"Likely open","p_open":1,"p_active":0.632,"p_room":1,"age_days":0,"expected_fill_days":52,"reasons":["conf:1","stale_co","velocity","win:early"],"computed_at":"2026-11-03T05:54:40Z"},"pay":null,"html_url":"https://alion.io/job/nasuni-senior-security-engineer-application-security","json_url":"https://alion.io/job/nasuni-senior-security-engineer-application-security.json","meta":{"generated_at":"2026-11-04T04:42:57Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":7263,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-05T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3836},"rest":"https://alion.io/mcp/rest/get_company?id=3836"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fnasuni-senior-security-engineer-application-security"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fnasuni-senior-security-engineer-application-security"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fnasuni-senior-security-engineer-application-security"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/nasuni-senior-security-engineer-application-security\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fnasuni-senior-security-engineer-application-security"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3612864}},{"tool":"search_jobs","arguments":{"company":"nasuni.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3612864},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}