Sr. Software Engineer - Application Security
At a glance
Senior Application & Product Security role at Backblaze External Website. Remote, Colombia.
Pay not stated Software Engineer salary
remoteroles summary, based on the employer's posting.
What you'll do
- Build and maintain product security features, using AI tools to meet new and existing software needs
- Review customer-facing applications and assess security, then work with engineers to fix vulnerabilities
- Create security automation and tools, and contribute to bug bounty and vulnerability handling
- Investigate reported flaws, identify fixes, and advise engineers on risks in existing applications
- Develop and support software across Tomcat, JSP, and Node/JavaScript components spanning multiple servers
What you bring
- You bring hands-on application development and security experience, including work with common web languages
- You understand AI development and security tools, web security weaknesses, and OWASP Top 10 risks
- You have used security testing tools such as scanners or fuzzing tools and know HTTP and REST APIs
- You have experience with web applications, cloud systems, and Linux environments
Who this fits
This senior, hands-on role suits an engineer who can apply AI to both software development and security work. It is remote in Colombia.
From the employer
About Backblaze
Backblaze provides reliable, high-availability cloud storage trusted by consumers, SMBs, enterprises, and developers in over 150 countries. Backblaze B2 Cloud Storage supports data-intensive workloads including backup, media, analytics, and modern AI pipelines. Our teams focus on building secure, durable, scalable systems with a strong emphasis on application security from day one and protecting customers to keep them safe.
But while there is a lot to celebrate in our past, there is almost as much opportunity ahead of us.
About the Role
We are seeking an Application Security Engineer to improve application security across the software used to enable Backblaze B2 Cloud Storage and Computer Backup. The primary role is to build security into how the product is used, how data is stored and how customers can use it. This role will require development skills and application security knowledge to build security into the product and new features. Leveraging AI is key.
This is a hands-on role that requires application development knowledge. This role is expected to know and use the latest AI to help with both development and security. The primary requirements include; development in common web languages, application security and AI tool usage.
- Leverage AI tools and software for
- Building new and maintaining existing software security features
- Meeting evolving software security needs in existing software
- Developing new components as needed
- Perform security assessments and code reviews on internal and external customer-facing applications
- Work closely with engineers to remediate security vulnerabilities using AI tools
- Develop security automation and tooling to improve security
- Support bug bounty program and vulnerability handling
- Investigate newly reported vulnerabilities
- Determine ways to remediate them
- Provide guidance to engineering based on known vulnerabilities found in existing applications
- Understanding cryptography and secure authentication
- Knowledge of cloud environments and security they provide
- Support and develop on large software stack using
- Apache Tomcat running across a large number of servers
- JavaServer Pages (JSP) containing older features
- Node/JavaScript developed features and pages
- An architecture split among many different servers – supporting browsers and custom client software
- Strong security knowledge across large software stacks running on multiple servers
- Ability to reach out and learn about technologies or implementations as necessary
The Right Fit:
- Application Development and Security knowledge
- AI knowledge and experience using it for development & security
- Understanding of: AI Frameworks and tooling, core web security, common web security flaws, coding agents
- Strong understanding of OWASP Top 10 vulnerabilities
- Experience with security testing tools such as:
- SAST / DAST scanners
- Fuzzing tools
- Vulnerability scanners
- Familiar with web technologies: HTTP, REST APIs, etc.
- Experience with Web Applications, Cloud Systems and Linux Environments
- Determining how new and old security needs can leverage AI workflows and integrations to improve them
- AI Coding tools such as Gemini, Claude Code, ChatGPT, Cursor or others
- Experience with programming languages such as: Java, JSP, JavaScript, TypeScript, Go, Python and C/C++
Why Backblaze
- Build secure software used by companies worldwide
- Work at the intersection of AI, data, and cloud storage
- Collaborate with experienced engineering, security, product, and QA teams
- Competitive compensation and benefits
- Remote-first culture supporting work-life balance
At this point, we hope you're feeling excited about the job description you're reading. Even if you don't meet every requirement, we still encourage you to apply. Learning, developing, and growing are key parts of our culture. We're eager to meet people who believe in our mission and can contribute to our team in various ways. We want people to feel comfortable expressing their true selves and to come, stay, and do their best work here.
At Backblaze, we value being fair and good to our customers, partners, and employees. That’s why diversity, equity, and inclusion are at the core of our values. We are committed to fostering a workforce where all employees feel a sense of belonging regardless of race, ethnicity, nationality, gender, sexual orientation, age, religion, socio-economic status, ability, veteran status, and education. We believe that our dedication to cultivating a diverse workspace not only allows us to better serve our customers in over 175 countries but further reinforces our commitment to doing the right thing. We are proud to be an Equal Opportunity Employer.
To understand more about the data we collect and process as part of your application, please view our Backblaze Employee Privacy Notice.
#LATAM