Senior Application Security Engineer

Role Overview

Join Temporal as a Senior Application Security Engineer to secure the Temporal development pipeline, product, and customer execution environment. You’ll partner with software engineering teams and customers to embed security across multiple clouds, and help ensure AI is used responsibly in both the product and engineering processes.

Responsibilities

• Partner with product and engineering teams to integrate security principles into product design and architecture.
• Perform threat modeling and risk assessments to find vulnerabilities and attack vectors across the product surface.
• Own and manage the Secure Development pipeline, including:
  • Code security
  • Third-party/library supply chain security
• Stay current with emerging security standards and guidance (e.g., OWASP Top 10 for LLMs, MCP security specifications) and translate them into actionable internal policy.
• Triage bug bounty findings and handle responsibly disclosed vulnerabilities.
• Participate in an on-call rotation.

Requirements

• Bachelor’s degree in Computer Science/Cybersecurity or equivalent experience.
• 5+ years in application/product security or a related role.
• Proven ability to partner with engineering teams and influence security into planning and delivery.
• Knowledge of encryption, authentication, and secure communication protocols.
• Experience with SAST, DAST, and penetration testing frameworks.
• Deep understanding of application architecture/design principles and the ability to identify vulnerabilities across multiple programming languages.
• Strong communication skills; able to explain complex security concepts to non-technical stakeholders.
• Kubernetes security posture management, including workload hardening, RBAC design, and admission control.
• Experience with multi-tenant security architecture (data plane isolation, control plane hardening, cross-tenant data leakage prevention).
• Programming language expertise; familiarity with Python and Go.

Nice to Have

• Distributed computing and related vulnerability experience.
• Experience running a Security Champions program.
• Open-source automation projects.
• Security conference talks or published research.