Application Security Engineer

About the role

Sonar, a leader in AI‑assisted code review and verification, is seeking an Application Security Engineer to champion security‑by‑design across its products and cloud platforms. You will work closely with product, platform and infrastructure teams to ensure that every solution meets Sonar’s high security standards.

Key responsibilities

• Shape secure product and cloud architecture by partnering with engineering from the earliest design stages.
• Review product architectures and AWS environments, embedding security requirements into technical decisions.
• Lead security assurance initiatives, including the deployment of modern security tools and capabilities.
• Plan, coordinate and manage independent security assessments, penetration tests and red‑team exercises.
• Translate assessment findings into practical improvements and customer‑facing trust artifacts.
• Investigate complex product and internal security findings and drive remediation.

Required profile

• Proven experience in application and cloud security engineering.
• Strong analytical skills with the ability to work cross‑functionally.
• Track record of delivering security improvements in fast‑paced, technology‑focused environments.

Required skills

• AWS cloud security
• Penetration testing
• Red‑team exercises
• Security assessments
• Security tooling
• Secure architecture design
• Incident investigation