Application Security Engineer

h2 Role Description /h2 p As part of the Product Security Engineering team, you’ll focus on reducing risk at scale by building the security infrastructure, automation, and tooling that empowers engineers to ship secure products with confidence. We work closely with engineering and product teams throughout the software development lifecycle (SDLC), embedding secure-by-default practices and delivering scalable solutions. /p p Product Security Engineers create impact by implementing security tooling, writing custom security rules, and building frameworks that address broad classes of vulnerabilities. In addition to proactive development, we support teams through threat modeling, documentation, and education to uplift security culture across Dropbox. /p div p span class= author-d-iz88z86z86za0dz67zz78zz78zz74zz68zjz80zz71z9iz90z95lz89zy6z71zz79zz84zz68zyz69zupz72zz79zcz69zz76zkz79zp1z66ztz67zxz71zz89zz86zz71z Our Engineering Career Framework is /span span class= attrlink url author-d-iz88z86z86za0dz67zz78zz78zz74zz68zjz80zz71z9iz90z95lz89zy6z71zz79zz84zz68zyz69zupz72zz79zcz69zz76zkz79zp1z66ztz67zxz71zz89zz86zz71z a class= attrlink href= https://dropbox.github.io/dbx-career-framework/ target= _blank data-target-href= https://dropbox.github.io/dbx-career-framework/ u viewable by anyone outside the company /u /a /span span class= author-d-iz88z86z86za0dz67zz78zz78zz74zz68zjz80zz71z9iz90z95lz89zy6z71zz79zz84zz68zyz69zupz72zz79zcz69zz76zkz79zp1z66ztz67zxz71zz89zz86zz71z and describes what’s expected for our engineers at each of our career levels. Check out our blog post on this topic and more /span span class= attrlink url author-d-iz88z86z86za0dz67zz78zz78zz74zz68zjz80zz71z9iz90z95lz89zy6z71zz79zz84zz68zyz69zupz72zz79zcz69zz76zkz79zp1z66ztz67zxz71zz89zz86zz71z a class= attrlink href= https://dropbox.tech/culture/sharing-our-engineering-career-framework-with-the-world target= _blank data-target-href= https://dropbox.tech/culture/sharing-our-engineering-career-framework-with-the-world here /a /span span class= author-d-iz88z86z86za0dz67zz78zz78zz74zz68zjz80zz71z9iz90z95lz89zy6z71zz79zz84zz68zyz69zupz72zz79zcz69zz76zkz79zp1z66ztz67zxz71zz89zz86zz71z . /span /p /div h2 Responsibilities /h2 ul li Build and maintain security tools, automation, and libraries to enable secure-by-default development across engineering teams. /li li Design and implement custom security rules span class= h-lparen (e.g., /span Semgrep, CodeQL) to detect and prevent common and emerging vulnerability patterns. /li li Act as a subject matter expert on application security across web, mobile, and desktop environments. /li li Improve and scale the Secure Development Lifecycle span class= h-lparen (SDLC) /span by integrating tools, checks, and processes into engineering workflows. /li li Perform targeted code reviews, and develop follow-up tooling or controls to prevent regressions. /li li Collaborate cross-functionally with engineering, product, GRC, and AI/ML teams to proactively address security risks, especially in fast-moving and emerging tech areas. /li /ul p span class= thread-348589118974529206372994 attrcomment attrcommentfirst thread-348589118974529206372994-first author-d-iz88z86z86za0dz67zz78zz78zz74zz68zjz80zz71z9iz90z95lz89zy6z71zz79zz84zz68zyz69zupz72zz79zcz69zz76zkz79zp1z66ztz67zxz71zz89zz86zz71z span class= author-d-iz88z86z86za0dz67zz78zz78zz74zz68zjz80zz71z9iz90z9z84zyz72zz70zz71zz72zhwl8r6xz85zr3z69z6z86zz78zz76zcfvdsgm4t Many teams at Dropbox run Services with on-call rotations, which entails being available for calls during both core and non-core business hours. If a team has an on-call rotation, all engineers on the team are expected to participate in the rotation as part of their employment. Applicants are encouraged to ask for more details of the rotations to which the applicant is applying. /span /span /p h2 Requirements /h2 ul li span class= author-d-1gg9uz65z1iz85zgdz68zmqkz84zo2qowz81zz86z9z90zz78z7z86zz74zz80zibfz65ztz83zcafqcoqz122zz83zaz