Staff Application Security Engineer

**About Temporal Technologies:**
Temporal offers an entirely new way to build scalable and reliable applications. Temporal enables developers to focus on writing important business logic, and not on managing state or worrying about the underlying infrastructure. Sequoia Capital led our last round of funding and our team has experience from start-ups and larger companies like Microsoft, Google, Amazon, Uber, and more.
Temporal is an open source programming model that can simplify code, make applications more reliable, and help developers focus on the important things like delivering features faster. Our amazing user community provides us with real-time feedback and contributions to improve the developer experience everywhere. Backed by top VC firms, we have built a team of professionals from various successful start-ups and well-known technology companies. Together, we collaborate cross-functionally, engage with and support our users to improve the developer experience, deliver world-class open-source software, and enhance our commercial SaaS platform.
We are committed to being user-obsessed, focusing on understanding and meeting developers’ needs. Dependability is at the core of everything we do. We prioritize employee wellbeing with competitive salaries, equity options, and a comprehensive benefits package. We embrace a remote-first culture with flexible schedules.
Join us on our mission to transform how applications are built.

**US Benefits Include:**
Unlimited PTO, 12 Holidays + 2 Floating Holidays, 100% Premiums Coverage for Medical, Dental, and Vision, AD&D, LT & ST Disability and Life Insurance , Empower 401K Plan, Additional Perks for Learning & Development, Lifestyle Spending, In-Home Office Setup, Professional Memberships, WFH Meals, Internet Stipend and more!


**About The Role:**
Join our dynamic team as a Staff Application Security Engineer, where you'll play a pivotal role in securing the Temporal development pipeline and product. In this position, you'll directly contribute by working closely with our software engineering teams and customers, empowering you to substantially impact our technology and community. We're looking for individuals who are ready to innovate and build the most supportive and inclusive developer ecosystem in the industry.

**What You'll Do / Responsibilities:**
Collaborate with product and engineering teams to integrate security principles into the design and architecture of products, including the development pipeline.
Lead complex threat modeling and risk assessments to identify vulnerabilities and potential attack vectors.
Drive strategy, influence architecture, and set direction for security across multiple teams or org-wide.
Act as a security advocate, fostering a culture of security within the organization.
Triage Bug Bounty findings and responsibility disclosed vulnerabilities.
Able to participate in on-call rotation.
Mentor other engineers in areas of application security, including brown bag sessions.

**What You'll Bring / Requirements / Qualifications:**
Bachelor’s degree in Computer Science, Cybersecurity, or a related field (or equivalent experience).
7+ years in application or product security or a related role.
Proven partnership with engineering teams, bringing security expertise to the planning and development process.
Knowledge of encryption, authentication, and secure communication protocols.
Familiarity with multiple tools in the areas of SAST, DAST, and penetration testing frameworks.
A deep understanding of application architecture and design principles, ability to effectively identify vulnerabilities across multiple programming languages
An understanding of AI-related threats, including MCP servers.
Demonstrated success defining actionable roadmaps from loosely scoped or ambiguous problem domains.
Excellent collaboration and communication skills.
Excellent communication and ability to explain complex security concepts to non-technical stakeholders.
History of some software development more complex than scripting.
Familiarity with Python and Go.
Nice to Have:
Distributed computing and related vulnerability experience.
Running a Security Champions program.
Kubernetes security posture and auditing.
Open Source automation or automation projects.
Professional Software Engineering experience.

**Compensation:**
The estimated pay range for this role is $190,000 - $250,000, depending on qualifications and location.
This role is eligible to participate in Temporal's equity plan.