Job Description: We are on the hunt for a seasoned Application Security Engineer with a robust background in software development and security. The ideal candidate will possess an in-depth understanding of application security and demonstrate proficiency in collaborating with development teams to secure sophisticated software applications, with a particular emphasis on cloud environments. Responsibilities: Lead the formulation and execution of application security strategies, safeguarding our applications throughout the entire software development lifecycle. Perform code reviews and security testing, pinpointing and mitigating vulnerabilities within our applications. Develop and uphold secure coding practices, and provide practical training to development teams to elevate their security acumen. Partner with cross-functional teams to weave security tools and practices into the DevOps pipeline. Keep pace with the latest security threats, vulnerabilities, and controls, leveraging this knowledge to strengthen our applications. Promote the adoption of security best practices and infuse security awareness into our company culture. Craft automated security testing tools to enhance the efficiency of security processes. Engage in incident response and architecture review processes, offering application security expertise as needed. Generate and maintain documentation for security systems and procedures. Mentor team members and prepare to manage a team. Qualifications: Bachelor's or Master's degree in Computer Science, Information Security, or a related technical field. A minimum of 10 years of experience in application security or a related field, with a documented history of securing applications. Proficient in programming languages such as Python, Java, Go, or Ruby. Comprehensive knowledge of web application architecture and security principles. Experience with cloud service providers (e.g., AWS, GCP, Azure) and their security tools and services. Skilled in security code review and dynamic application security testing tools and methodologies. Familiarity with industry standards and frameworks such as OWASP, SANS, etc. Security certifications such as OSCP, GWAPT, or similar are advantageous. Exceptional communication skills, capable of explaining complex security issues to both technical and non-technical audiences. A fervent interest in security, coupled with a proactive and results-oriented work ethic. Additional Requirement: This position requires the flexibility to work at least half the day in US hours to ensure effective collaboration with leadership and global team members. The ability to manage time across multiple time zones is essential for success in this role. This role offers the chance to join an exciting team and contribute to the security of state-of-the-art applications. If you have a passion for application security and are excited to work with the latest technologies, while accommodating collaboration across US time zones, we encourage you to apply. Come make a difference with us! Pattern is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. Ecommerce is booming. The challenges we solve are exciting. And we’re just getting started. We’re looking for talented people with plenty of hustle to change the game at Pattern. Is that you? Let's chat