{"id":2860679,"url":"https://alion.io/job/reltio-staff-application-security-engineer-2","title":"Staff Application Security Engineer","company":{"id":685804,"name":"Reltio","domain":"reltio.com","url":"https://alion.io/company/reltio","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"A","score":89,"open_postings":9,"ghost_share":0,"stale_share":0.444,"repost_share":0,"time_to_fill_p50_days":43,"computed_at":"2026-10-23T05:54:15Z"}},"role":"Security","role_family":"Security","seniority":"staff","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":145000,"max":207000,"currency":"USD","period":"year","gross":null,"usd_annual":207000},"salary_estimate":null,"experience_years_min":8,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Agentic Workflows","optional":false},{"name":"AI Agents","optional":false},{"name":"ArgoCD","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Burp Suite","optional":false},{"name":"C#","optional":false},{"name":"CI/CD","optional":false},{"name":"Defense in Depth","optional":false},{"name":"Function Calling","optional":false},{"name":"GCP","optional":false},{"name":"JavaScript","optional":false},{"name":"Jenkins","optional":false},{"name":"Kubernetes","optional":false},{"name":"LLM Guardrails","optional":false},{"name":"Model Context Protocol","optional":false},{"name":"Node JS","optional":false},{"name":"OWASP","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"Shift-Left Security","optional":false},{"name":"Spring Boot","optional":false},{"name":"Threat Modeling","optional":false},{"name":"Wiz","optional":false},{"name":"Checkmarx","optional":true},{"name":"DefectDojo","optional":true},{"name":"ISO 27001","optional":true},{"name":"Java","optional":true},{"name":"NeMo Guardrails","optional":true},{"name":"SOC 2","optional":true},{"name":"SonarQube","optional":true},{"name":"Veracode","optional":true}],"status":"live","first_seen_at":"2026-10-19T12:36:22Z","employer_posted_date":"2026-10-19","last_verified_at":"2026-10-23T10:17:49Z","board_verified":true,"closed_at":null,"days_open":3,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":3},"description":"At Reltio®, an SAP Company, we believe data should fuel your success in the enterprise AI era. Our Context Intelligence Platform turns fragmented data into a trusted, connected context so AI agents and systems can act with expert-level judgement at enterprise scale. Reltio’s cloud-native SaaS platform harmonizes, unifies, and governs data across sources and formats-including unstructured data-in real time, turning them into data assets that can be mobilized in milliseconds to any application, user, or AI agent. Trusted by more than 200 of the world’s largest brands across industries such as life sciences, financial services, healthcare, and technology, we fuel frictionless operations and help enterprises accelerate innovation and reduce risk.\nAt Reltio, our values guide everything we do. With an unyielding commitment to prioritizing our “Customer First”, we strive to ensure their success. We embrace our differences and are “Better Together” as One Reltio. We are always looking to “Simplify and Share” our knowledge when we collaborate to remove obstacles for each other. We hold ourselves accountable for our actions and outcomes and strive for excellence. We “Own It”. Every day, we innovate and evolve, so that today is “Always Better Than Yesterday”. If you share and embody these values, we invite you to join our team at Reltio and contribute to our mission of excellence.\nReltio has earned numerous awards and industry and analyst recognition for our technology, our culture and our people. Reltio was founded on a distributed workforce and offers flexible work arrangements to help our people manage their personal and professional lives. If you’re ready to work on unrivaled technology where your desire to be part of a collaborative team is met with a laser-focused mission to enable digital transformation with connected data, let’s talk!\nJob Summary: \nAs a senior individual contributor on the Application Security team, the Staff Application Security Engineer will help to define and drive Reltio’s application and product security architecture across a distributed, cloud-native SaaS platform. This role helps in the technical direction for securing how Reltio designs, builds, and ships software-helps to define the strategy and roadmap for secure SDLC, shift-left automation, and the secure adoption of API-driven and AI/agentic technologies.\nThe Staff Application Security Engineer will partner with the Engineering, DevOps, Product, and Release Management teams to embed security as a foundational part of software design and delivery. The successful candidate will set standards, mentor and uplevel other security and engineering staff, lead complex threat modeling and architecture reviews, and develop novel techniques to identify and stop application- and AI-layer attacks-protecting Reltio’s intellectual property and customer data globally.\nJob Duties and Responsibilities:\nSecurity Architecture & Technical Leadership\nServe as the senior application security subject matter expert, providing guidance on industry best practices, secure design patterns, and defense-in-depth strategies for the product security architecture.\nHelps to define and drive the overall application/product security architecture, vision, strategy, and roadmap across Reltio’s platform and services.\nInfluence engineering architecture and roadmap decisions without direct authority, driving risk-based consensus across teams.\nMentor and uplevel application security engineers and development teams, raising the secure-coding maturity of the broader organization.\nSecure Development Lifecycle & Shift-Left\nEmbed security throughout the SDLC, from design through deployment, and define secure coding standards and best practices adopted across teams.\nDrive shift-left initiatives by providing guidance, tooling, paved-road patterns, and remediation support that enable engineers to build securely from the outset.\nCI/CD Pipeline Security\nDesign and implement security controls within CI/CD pipelines, enabling automated security testing and vulnerability detection at scale.\nOperationalize SAST, SCA, DAST, and secrets scanning as policy-driven, low-friction gates; partner with release management on secure deployment checks and policy compliance.\nThreat Modeling & Risk Assessment\nLead threat modeling sessions for complex, high-impact systems to identify and mitigate security risks early in design and architecture phases.\nPerform technical risk assessments of new technology and ensure solutions meet secure architecture designs; assess, measure, and clearly communicate risk impact to stakeholders.\nVulnerability Management\nAnalyze and validate remediation of application security findings from SAST, SCA, DAST, API testing, penetration tests, and manual assessments.\nDrive risk-based prioritization of fixes, reduce false positives, and provide clear, actionable remediation guidance with proper pre-release validation.\nAPI Security\nPartner with engineering to ensure secure API design and implementation; identify and mitigate authentication/authorization issues, data exposure, rate-limiting gaps, and OWASP API Top 10 risks.\nAI & Agentic Security (Guardrails, MCP, LLM)\nHelps to define AI security guardrails for Reltio’s AI and multi-agent platforms, addressing prompt/output validation, insecure model usage, data leakage, and tenant-isolation concerns.\nEstablish security standards for Model Context Protocol (MCP) servers and tools-covering tool authorization, scoping, and abuse prevention-and lead threat modeling of agentic workflows (autonomous tool use, indirect prompt injection, excessive agency).\nDevelop new and novel defense techniques to detect and stop advanced application- and AI-layer adversary tactics, and evaluate AI-assisted security tooling to scale detection and remediation.\nPenetration Testing & Security Validation\nPerform and oversee application, API, and AI/agent penetration testing; build and curate test payloads (including prompt-injection and guardrail bypass suites) and validate control effectiveness.\nTraining, Collaboration & Continuous Improvement\nDeliver secure-coding, API, and AI-security guidance and hands-on support during code and design reviews.\nPartner with DevOps, QA, Engineering, Product, and Release Management to integrate security requirements throughout development and release.\nStay current on emerging application, API, and AI/agentic security threats and continuously improve security processes, tooling, and overall posture.\nInvestigate security events and incidents leveraging security tooling, and support customer-facing security communications as needed.\nSkills You Must Have: \n8+ years of experience in application security or software development, including significant time in a cloud-native or SaaS environment.\nDemonstrated technical leadership as a senior individual contributor: setting standards, driving cross-team initiatives, and influencing architecture without direct authority.\nHands-on experience with secure coding practices and modern application development; proficiency leading secure code reviews.\nStrong understanding of cloud well-architected frameworks, application development, and deployment workflows.\nStrong understanding of application security vulnerabilities (OWASP Top 10) and prevention strategies.\nStrong understanding of API security principles and the OWASP API Top 10.\nExperience integrating security into CI/CD and release management processes (e.g., Jenkins, ArgoCD, or similar).\nExperience with application security testing methodologies-SAST, SCA, and DAST-integrated into CI/CD pipelines.\nExperience with AI security concepts, including guardrails, prompt and output validation, data protection, and MCP security.\nHands-on experience with web technologies such as Java, Java Spring Boot, JavaScript, Node.js, C#, modern UI frameworks, microservices, and cloud-native/serverless architectures.\nExperience with AWS, GCP, and/or Azure, and securing containerized environments and Kubernetes.\nHands-on experience with Burp Suite Pro for web and API testing.\nExperience with modern application security platforms, with Wiz preferred (other AppSec tools acceptable).\nStrong communication and presentation skills, with the ability to educate, collaborate, and drive risk-based consensus.\nSelf-starter with a history of driving technical initiatives; adaptable, agile, and effective in global, distributed teams.\nSkills That Are Nice to Have: \nHands-on experience securing LLM applications and multi-agent systems, including agentic guardrail frameworks (e.g., NeMo Guardrails, AWS Bedrock Guardrails) and MCP gateway/tool security.\nExperience building or operationalizing AppSec automation/orchestration (SAST/SCA/secrets + AI analysis) and defect-management integration (e.g., DefectDojo).\nExperience with commercial AppSec/SCA platforms such as Wiz Code, Veracode, Checkmarx, Cycode, or SonarQube.\nExperience developing and operationalizing a vulnerability management or product security program at scale.\nExperience with industry frameworks such as SOC 2, HITRUST, or ISO 27001, and supporting audit/customer-assurance processes.\nApplying ML/AI techniques to enhance security detection, anomaly identification, and automated risk prioritization.\nRelevant security and cloud certifications.\nAt Reltio, we carefully consider a wide range of compensation factors to determine your personal top of market. We rely on market indicators to determine compensation and your specific job family, background, skills, and experience to get it right. These considerations can cause your compensation to vary and will also be dependent on your location. \nOverall Market Range\n$145,000—$207,000 USD\nReltio is proud to be an equal opportunity workplace. We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity or Veteran status. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. Reltio is committed to working with and providing reasonable accommodation to applicants with physical and mental disabilities.","description_format":"text","description_chars":10215,"description_truncated":false,"requirements":{"experience_years_min":8,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Flexible schedule"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Application Security","Master Data Management"],"lifecycle":[{"event":"open","at":"2026-10-19T16:09:24Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 8 · green card filings: 3","filings_12m":8,"filings_prev_12m":10,"green_card_filings_12m":3,"median_offered_wage_usd":174318,"route":null,"cap_exempt":false,"checked_at":"2026-10-15T11:24:14+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":2}],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":3,"expected_fill_days":43,"reasons":["conf:0","velocity","win:early"],"computed_at":"2026-10-23T05:54:15Z"},"pay":{"stated_usd_annual":207000,"is_top_pay":true},"html_url":"https://alion.io/job/reltio-staff-application-security-engineer-2","json_url":"https://alion.io/job/reltio-staff-application-security-engineer-2.json","meta":{"generated_at":"2026-10-23T11:18:18Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":17147,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-24T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":685804},"rest":"https://alion.io/mcp/rest/get_company?id=685804"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Freltio-staff-application-security-engineer-2"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Freltio-staff-application-security-engineer-2"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Freltio-staff-application-security-engineer-2"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/reltio-staff-application-security-engineer-2\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Freltio-staff-application-security-engineer-2"}]}