greenhouse
Staff Application Security Engineer
Reltio
USA
Senior · 8+ years experience
Onsite
$145,000—$207,000 USD
Discovered 6 days ago
awsazurebedrockgcpjavajavascript
Role Overview
As a senior individual contributor on the Application Security team, the Staff Application Security Engineer will help to define and drive Reltio’s application and product security architecture across a distributed, cloud-native SaaS platform.
This role helps in the technical direction for securing how Reltio designs, builds, and ships software—helps to define the strategy and roadmap for secure SDLC, shift-left automation, and the secure adoption of API-driven and AI/agentic technologies.
The Staff Application Security Engineer will partner with the Engineering, DevOps, Product, and Release Management teams to embed security as a foundational part of software design and delivery.
The successful candidate will set standards, mentor and uplevel other security and engineering staff, lead complex threat modeling and architecture reviews, and develop novel techniques to identify and stop application- and AI-layer attacks—protecting Reltio’s intellectual property and customer data globally.
Key Skills for This Role
awsazurebedrockgcpjavajavascript
Full Job Posting
Skills
- You Must Have:
- 8+ years of experience in application security or software development, including significant time in a cloud-native or SaaS environment.
- Demonstrated technical leadership as a senior individual contributor: setting standards, driving cross-team initiatives, and influencing architecture without direct authority.
- Hands-on experience with secure coding practices and modern application development; proficiency leading secure code reviews.
- Strong understanding of cloud well-architected frameworks, application development, and deployment workflows.
- Strong understanding of application security vulnerabilities (OWASP Top 10) and prevention strategies.
- Strong understanding of API security principles and the OWASP API Top 10.
- Experience integrating security into CI/CD and release management processes (e.g., Jenkins, ArgoCD, or similar).
- Experience with application security testing methodologies—SAST, SCA, and DAST—integrated into CI/CD pipelines.
- Experience with AI security concepts, including guardrails, prompt and output validation, data protection, and MCP security.
- Hands-on experience with web technologies such as Java, Java Spring Boot, JavaScript, Node.js, C#, modern UI frameworks, microservices, and cloud-native/serverless architectures.
- Experience with AWS, GCP, and/or Azure, and securing containerized environments and Kubernetes.
- Hands-on experience with Burp Suite Pro for web and API testing.
- Experience with modern application security platforms, with Wiz preferred (other AppSec tools acceptable).
- Strong communication and presentation skills, with the ability to educate, collaborate, and drive risk-based consensus.
- Self-starter with a history of driving technical initiatives; adaptable, agile, and effective in global, distributed teams.
Skills
- That Are Nice to Have:
- Hands-on experience securing LLM applications and multi-agent systems, including agentic guardrail frameworks (e.g., NeMo Guardrails, AWS Bedrock Guardrails) and MCP gateway/tool security.
- Experience building or operationalizing AppSec automation/orchestration (SAST/SCA/secrets + AI analysis) and defect-management integration (e.g., DefectDojo).
- Experience with commercial AppSec/SCA platforms such as Wiz Code, Veracode, Checkmarx, Cycode, or SonarQube.
- Experience developing and operationalizing a vulnerability management or product security program at scale.
- Experience with industry frameworks such as SOC 2, HITRUST, or ISO 27001, and supporting audit/customer-assurance processes.
- Applying ML/AI techniques to enhance security detection, anomaly identification, and automated risk prioritization.
- Relevant security and cloud certifications.
- At Reltio, we carefully consider a wide range of compensation factors to determine your personal top of market. We rely on market indicators to determine compensation and your specific job family, background, skills, and experience to get it right. These considerations can cause your compensation to vary and will also be dependent on your location. Overall Market Range$145,000—$207,000 USD
- Reltio is proud to be an equal opportunity workplace. We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity or Veteran status. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. Reltio is committed to working with and providing reasonable accommodation to applicants with physical and mental disabilities.
Qualifications
- 8+ years of experience in application security or software development, including significant time in a cloud-native or SaaS environment.
- Demonstrated technical leadership as a senior individual contributor: setting standards, driving cross-team initiatives, and influencing architecture without direct authority.
- Hands-on experience with secure coding practices and modern application development; proficiency leading secure code reviews.
- Strong understanding of cloud well-architected frameworks, application development, and deployment workflows.
- Strong understanding of application security vulnerabilities (OWASP Top 10) and prevention strategies.
- Strong understanding of API security principles and the OWASP API Top 10.
- Experience integrating security into CI/CD and release management processes (e.g., Jenkins, ArgoCD, or similar).
- Experience with application security testing methodologies—SAST, SCA, and DAST—integrated into CI/CD pipelines.
- Experience with AI security concepts, including guardrails, prompt and output validation, data protection, and MCP security.
- Hands-on experience with web technologies such as Java, Java Spring Boot, JavaScript, Node.js, C#, modern UI frameworks, microservices, and cloud-native/serverless architectures.
- Experience with AWS, GCP, and/or Azure, and securing containerized environments and Kubernetes.
- Hands-on experience with Burp Suite Pro for web and API testing.
- Strong communication and presentation skills, with the ability to educate, collaborate, and drive risk-based consensus.
- Self-starter with a history of driving technical initiatives; adaptable, agile, and effective in global, distributed teams.
- Hands-on experience securing LLM applications and multi-agent systems, including agentic guardrail frameworks (e.g., NeMo Guardrails, AWS Bedrock Guardrails) and MCP gateway/tool security.
- Experience building or operationalizing AppSec automation/orchestration (SAST/SCA/secrets + AI analysis) and defect-management integration (e.g., DefectDojo).
- Experience with commercial AppSec/SCA platforms such as Wiz Code, Veracode, Checkmarx, Cycode, or SonarQube.
- Experience developing and operationalizing a vulnerability management or product security program at scale.
- Experience with industry frameworks such as SOC 2, HITRUST, or ISO 27001, and supporting audit/customer-assurance processes.
- Applying ML/AI techniques to enhance security detection, anomaly identification, and automated risk prioritization.
- Relevant security and cloud certifications.
- At Reltio, we carefully consider a wide range of compensation factors to determine your personal top of market. We rely on market indicators to determine compensation and your specific job family, background, skills, and experience to get it right. These considerations can cause your compensation to vary and will also be dependent on your location. Overall Market Range$145,000—$207,000 USD
- Reltio is proud to be an equal opportunity workplace. We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity or Veteran status. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. Reltio is committed to working with and providing reasonable accommodation to applicants with physical and mental disabilities.
Preferred Qualifications
- Experience with modern application security platforms, with Wiz preferred (other AppSec tools acceptable).
About Reltio
Technology
Cloud-native master data management platform that unifies, cleanses, and enriches enterprise data to deliver trusted, real-time insights across the organization.
Visit company websiteJobs and hiring trendsApply for this job in 1 click
Skip the repetitive application forms
Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.
Trusted by over 500,000 job seekers on Base Career
More from this employer
More jobs at Reltio
Associate Customer Engineer
, USA
Discovered 2 days ago
Principal Enterprise Architect
, USA
Discovered 2 days ago
Senior Engineer - CI/CD
, IND
Discovered 2 days ago
Customer Architect
London, GBR
Discovered 2 weeks agoFull-time
Senior Technical Consultant
, USA
Discovered 2 weeks ago
Business Development Rep
, USA
Discovered 3 weeks ago
Customer Architect
, USA
Discovered 3 weeks agoFull-time
Staff Cloud Security Engineer
, USA
Discovered 1 months agoFull-time