Application Security & Triage Engineer

The Application Security & Triage Engineer owns the deterministic risk intelligence layer that prioritizes security fixes based on actual business risk rather than scanner severity. This role involves correlating findings from various security tools into unique exposures, enriching them with threat and deployment context, and mapping them to specific remediation actions. The engineer builds and maintains the policy-as-code scoring model to ensure reproducible, explainable, and traceable risk rankings. The position requires deep expertise in application security, Python development, and attack path analysis to drive effective risk reduction.