Security Engineer, Application Security

Responsibilities

• Support and mature security review processes, including secure code review, architecture review, and threat modeling.
• Manage vulnerability intake, triage, prioritization, remediation tracking, bug bounty, and responsible disclosure activities.
• Partner with engineering and product teams to advocate for secure-by-design practices and integrate security tooling into development workflows.
• Validate and reproduce application and infrastructure security findings through scanning, manual testing, penetration-testing support, and vulnerability validation.
• Evaluate and respond to emerging application security threats across Sentry’s applications, SDKs, cloud platform, agentic features, and AI-assisted engineering practices.
• Automate security processes and drive security initiatives end-to-end in a cross-functional engineering environment.

Requirements

• At least 2 years of industry experience designing, building, or securing complex applications and cloud systems.
• Degree in Computer Science or a related field, equivalent training, or professional experience.
• Hands-on experience with security reviews, SDLC practices, secure CI/CD, architecture reviews, threat modeling, vulnerability management, bug bounty programs, or responsible disclosure programs.
• Programming experience in at least one language and ability to read and reason about Python, TypeScript, Go, or Rust code.
• Familiarity with AWS, GCP, Azure, Kubernetes, Docker, or Terraform and with securing cloud networking and IAM.
• Strong written and verbal communication skills and a collaborative problem-solving approach.

Benefits

• Eligibility for employee benefit plans and programs applicable to the position, including incentive compensation, equity grants, paid time off, and group health insurance coverage.
• Sentry provides reasonable accommodations for candidates and employees with disabilities.
• The posting does not state a work arrangement or location schedule.