Sentry
Security Engineer, Application Security
About this role
Sentry is seeking a Security Engineer for Application Security to help mature their security program across a developer-focused platform. You'll drive security reviews, vulnerability management, and secure-by-design practices while partnering with engineering teams to embed security throughout the development lifecycle.
What you'll do
- Lead and mature security review processes including code review, architecture review, and threat modeling
- Manage vulnerability intake, triage, prioritization, and support bug bounty and responsible disclosure programs
- Advocate for secure-by-design principles and integrate security tooling into CI/CD workflows
- Validate and reproduce security findings through scanning, manual testing, and penetration test support
- Evaluate emerging threats specific to application security, including novel attack surfaces from agentic features
- Build scalable, systematic solutions to security problems across the organization
What they're looking for
- Application and platform security engineering
- Secure code review and architecture review
- Threat modeling and vulnerability management
- Programming in Python, TypeScript, Go, or Rust
- Cloud infrastructure security (AWS, GCP, Azure, Kubernetes, Terraform)
- CI/CD security and SDLC practices
- Security testing and penetration testing
- Cross-functional collaboration and technical communication
Opens the application — the Jobs AI extension fills it for you. Set up autofill
Opens the official application on the employer’s site. No login required.
Sentry
Sentry builds application monitoring and error tracking tools that help developers identify and resolve issues in their software. The company is hiring Technical Support Engineers, Solutions Engineers, and Security Engineers to support customer implementations, optimize monitoring workflows, and strengthen internal security practices.
- Website
- sentry.io
Likely interview questions
- Can you walk us through a security review or threat modeling exercise you've led? What was your approach and outcome?
- How have you embedded security into CI/CD pipelines or developer workflows at a previous role?