{"id":942878,"url":"https://alion.io/job/omnissa-staff-ii-application-security-engineer","title":"Staff / Staff II - Application Security Engineer","company":{"id":2748,"name":"Omnissa","domain":"omnissa.com","url":"https://alion.io/company/omnissa","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"A","score":90,"open_postings":22,"ghost_share":0,"stale_share":0.409,"repost_share":0,"time_to_fill_p50_days":43,"computed_at":"2026-10-10T05:45:15Z"}},"role":"Security","role_family":"Security","seniority":"staff","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["Atlanta, United States","Mountain View, United States","United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":220000,"max":270000,"currency":"USD","period":"year","gross":null,"usd_annual":270000},"salary_estimate":null,"experience_years_min":10,"visa_sponsorship":true,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"C++","optional":false},{"name":"CodeQL","optional":false},{"name":"Java","optional":false},{"name":"LLM Guardrails","optional":false},{"name":"SDL","optional":false},{"name":"Threat Modeling","optional":false},{"name":"C","optional":true}],"status":"live","first_seen_at":"2026-07-01T00:00:00Z","employer_posted_date":"2026-09-29","last_verified_at":"2026-10-12T04:22:47Z","board_verified":true,"closed_at":null,"days_open":103,"trust":{"level":"ok","repost_count":1,"flags":[],"days_open":102},"description":"Job Description:\nApplication Security Engineer - Staff / Staff II\nPrimary Locations - Hybrid 3 days in office in either Atlanta, GA or Mountain View, CA\nCan be open to fully remote individuals who are located in the United States if they meet all qualifications of the role.\nWe are Omnissa! Omnissa is the first AI-driven digital work platform, built to support flexible, secure, work-from-anywhere experiences. We integrate industry-leading solutions-including Unified Endpoint Management, Virtual Apps and Desktops, Digital Employee Experience, and Security & Compliance-into a seamless, autonomous workspace that adapts to how people work. Our platform boosts employee engagement while optimizing IT operations, security, and cost.\nGuided by our Core Values-Act in Alignment, Build Trust, Foster Inclusiveness, Drive Efficiency, and Maximize Customer Value-we’re growing rapidly and committed to delivering meaningful impact. If you’re passionate about shaping the future of work, we’d love to hear from you.\nWhat is the opportunity?:\nThis is a senior, hands-on technical leadership role on our Product Security team. As a Staff or Staff II Application Security Engineer, you will set the technical direction for how we secure software across Omnissa’s product portfolio - spanning Unified Endpoint Management, Virtual Apps and Desktops, and our cloud-native and mobile platforms. You will operate as a force multiplier: influencing architecture and engineering decisions across multiple teams, raising the security bar for the broader organization, and tackling the hardest, most ambiguous problems where the right answer isn’t yet defined. This is a technical leadership track and does not include direct people management; your impact comes through expertise, influence, and the standards you set for others.\nIf you have an analytical mind, a passion for software security, and thrive on solving hard problems, this role is for you. A successful candidate handles a variety of difficult challenges, manages their time efficiently, solves problems creatively, and can identify and understand root causes.\nKey Responsibilities:\nSecurity Architecture & Threat Modeling\nSet technical direction for application security across the portfolio - defining standards, patterns, and guardrails adopted by engineering teams at scale.\nLead threat modeling across distributed, cloud-native, and mobile architectures as a repeatable practice embedded in the development lifecycle, not a one-off exercise.\nDefine security architecture reference designs that, when followed by engineering teams, remove the need to security-review that aspect on a per-feature basis.\nIdentify architectural risk early and influence roadmap and design decisions before implementation begins.\nSecure Code Review & Vulnerability Research\nPerform manual code review and application security testing across Java and C++ codebases; codify findings into reusable guidance engineers can act on without follow-up.\nScale code review coverage using AI-assisted analysis and custom CodeQL queries tuned to Omnissa's codebase and vulnerability patterns.\nConduct variant analysis to ensure confirmed vulnerability classes are remediated consistently across the codebase, not in isolation.\nTriage and validate externally reported vulnerabilities - assess exploitability, severity, and business impact, and drive remediation to closure across team boundaries.\nTranslate individual findings into systemic recommendations that address root-cause design or implementation gaps across products.\nSecurity Program Maturity\nDefine and evolve the SDL - identify gaps, drive measurable improvements, and own the iteration cycle.\nImprove the feature security review program so security work shifts left into design and scales across teams, rather than landing as a release gate.\nMature the product penetration testing program - define scope, methodology, and cadence; ensure findings drive systemic fixes, not one-off patches.\nBuild and scale the security champions program; mentor engineers and create training that extends security capability beyond the security team.\nEstablish metrics that make program effectiveness visible to engineering and product leadership.\nWhat success looks like:\nFirst 3 months: Build a deep understanding of the product architecture, development toolchain, and release process across multiple product areas. Begin influencing in-flight architectural and design decisions, and identify the highest-leverage gaps in the current security program.\nFirst 6 months: Own the security strategy for a significant area of the portfolio. Set direction that other engineers execute against, drive cross-team prioritization of security work, and shape backlog and roadmap decisions. Iterate improvements on the current SDL.\n12 months and beyond: Deliver measurable, org-level improvements in security posture - e.g., materially reduced mean time to remediation, broadened threat model coverage, or new automation adopted in production across teams. Be recognized as a go-to technical authority on application security and a multiplier of the team’s overall effectiveness.\nLeadership and team culture:\nReport to the Director of Product Security and take technical direction from the Manager of Application Security, while operating with a high degree of autonomy.\nWork closely with a committed team of security engineers, product managers, and developers focused on innovation and getting things done.\nBuild trust among team members and stakeholders, committing to customer success.\nOperate in a transparent, communicative environment that emphasizes work-life balance and having fun at work.\nIdentify and drive improvements to security processes - both internal workflows and partner-facing interfaces - that reduce friction for development teams and increase the daily effectiveness of security engineers.\nWhat will you bring to Omnissa?\nRequired:\n10+ years of hands-on application security experience, with demonstrated technical depth and a track record of influence beyond your own work.\nDeep knowledge of application security vulnerabilities and mitigation techniques, and the judgment to prioritize them by real business and customer impact.\nProven ability to lead threat modeling, secure design, and security architecture for complex distributed and cloud-native systems.\nProficiency in Java or C++, with the ability to read, reason about, and review production code.\nSecurity breadth across multiple domains - application, system, cloud, and mobile.\nA demonstrated history of driving technical change and raising the security bar across teams, and of mentoring senior engineers.\nExcellent documentation and communication skills, including the ability to influence engineering and product leadership.\nSelf-starter who is adaptable, works independently, and brings clarity to ambiguous problems.\nA pragmatic mindset; able to identify practical short term and long term strategic solutions\nPreferred:\nExperience testing agentic AI systems, and the ability to leverage AI tooling across security testing, triage, and documentation workflows.\nExperience building automation solutions that improve the security process at scale.\nPrior experience as a pen tester for a multi-tenant SaaS provider.\nLocation: Atlanta, GA (Primary consideration) or Mountain View, CA.\nLocation Type: HYBRID - 3 days per week in our Atlanta (or Mountain View) office; remaining days remote. Candidates must reside within a reasonable commuting distance.\nTravel Expectations: Travel to remote offices twice per year.\nEducation: Bachelor’s degree in Computer Science or a related field preferred, or equivalent combination of education and relevant professional experience.\nThe typical base salary for this role is between USD $220,000 - $270,000 per year and it may be eligible for participation in a corporate bonus program. Actual compensation offer may vary from posted hiring range based upon geographic location, work experience, education, skill level, or other relevant factors. In addition to competitive compensation, Omnissa offers a variety of benefits such as employee ownership, health insurance, 401k with matching contributions, disability insurance, paid-time off, growth opportunities, and more.\nOmnissa is an Equal Employment Opportunity company and Prohibits Discrimination and Harassment of Any Kind:\nOmnissa is committed to the principle of equal employment opportunity and to providing a work environment free of discrimination and harassment. All employment decisions at Omnissa are based on business needs, job requirements and individual qualifications, without regard to race, color, religion, ancestry, ethnicity, national, social or ethnic origin, sex (including pregnancy), age, physical, mental or sensory disability, HIV status, sexual orientation, gender identity and/or expression, marital, civil union or domestic partnership status, past, present, or prospective service in the uniformed services, family medical history or genetic information, family or parental status, veteran status, or any other status protected by applicable laws or regulations in the locations where we operate. Omnissa will not tolerate discrimination or harassment based on any of these characteristics. Omnissa welcomes applicants of all ages. Omnissa will provide reasonable accommodations to applicants and employees who have protected disabilities consistent with applicable federal, state and local law.\nThis job requisition is not eligible for employment-based immigration sponsorship by Omnissa.","description_format":"text","description_chars":9557,"description_truncated":false,"requirements":{"experience_years_min":10,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["401k plan","Growth opportunities","Health insurance"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Application Security","Cybersecurity","Virtualization & Containers","Endpoint Security"],"lifecycle":[{"event":"open","at":"2026-09-15T19:25:40Z"},{"event":"close","at":"2026-09-25T05:10:20Z"},{"event":"reopen","at":"2026-10-01T06:12:18Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 44","filings_12m":44,"filings_prev_12m":96,"green_card_filings_12m":0,"median_offered_wage_usd":187500,"route":null,"cap_exempt":false,"checked_at":"2026-10-03T21:08:04+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)"],"filings_for_role_12m":6}],"liveness":{"score":20,"band":"cold","label":"Long shot","p_open":1,"p_active":0.701,"p_room":0.28,"age_days":101,"expected_fill_days":43,"reasons":["conf:7","velocity","win:tail","crowd:brand"],"computed_at":"2026-10-10T05:45:15Z"},"pay":{"stated_usd_annual":270000,"is_top_pay":true},"html_url":"https://alion.io/job/omnissa-staff-ii-application-security-engineer","json_url":"https://alion.io/job/omnissa-staff-ii-application-security-engineer.json","meta":{"generated_at":"2026-10-12T04:52:25Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":7608,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-13T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2748},"rest":"https://alion.io/mcp/rest/get_company?id=2748"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fomnissa-staff-ii-application-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fomnissa-staff-ii-application-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fomnissa-staff-ii-application-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/omnissa-staff-ii-application-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fomnissa-staff-ii-application-security-engineer"}]}