At Reltio®, we believe data should fuel business success. Reltio’s AI-powered data unification and management capabilities—encompassing entity resolution, multi-domain master data management (MDM), and data products—transform siloed data from disparate sources into unified, trusted, and interoperable data. Reltio Data Cloud™ delivers interoperable data where and when it's needed, empowering data and analytics leaders with unparalleled business responsiveness. Leading enterprise brands—across multiple industries around the globe—rely on our award-winning data unification and cloud-native MDM capabilities to improve efficiency, manage risk and drive growth.
At Reltio, our values guide everything we do. With an unyielding commitment to prioritizing our “Customer First”, we strive to ensure their success. We embrace our differences and are “Better Together” as One Reltio. We are always looking to “Simplify and Share” our knowledge when we collaborate to remove obstacles for each other. We hold ourselves accountable for our actions and outcomes and strive for excellence. We “Own It”. Every day, we innovate and evolve, so that today is “Always Better Than Yesterday”. If you share and embody these values, we invite you to join our team at Reltio and contribute to our mission of excellence.
Reltio has earned numerous awards and top rankings for our technology, our culture and our people. Reltio was founded on a distributed workforce and offers flexible work arrangements to help our people manage their personal and professional lives. If you’re ready to work on unrivaled technology where your desire to be part of a collaborative team is met with a laser-focused mission to enable digital transformation with connected data, let’s talk!
The Sr. Application Security Engineer will play a key role in embedding security into our development and release processes. You will partner with cross-functional teams to ensure security is a foundational part of software design, development, and deployment, promoting secure coding practices, shift-left methodologies, and the secure adoption of API-driven and AI-enabled technologies.
Secure Development Lifecycle:
Collaborate with development teams to embed security throughout the software development lifecycle (SDLC), from design through deployment. Support the adoption of secure coding standards and best practices across teams.
CI/CD Pipeline Security:
Implement security controls within CI/CD pipelines, enabling automated security testing and vulnerability detection. Partner with release management to ensure secure deployment checks and policy compliance, including operationalizing SAST, SCA, and DAST.
Shift-Left Security:
Drive shift-left initiatives by providing guidance, tooling, and remediation support to engineers, enabling secure development from the outset.
Threat Modeling:
Lead threat modeling sessions with development teams to identify and mitigate security risks early in the design and architecture phases.
Vulnerability Management:
Analyze and validate remediation of application security findings from SAST, SCA, DAST, API testing, and manual assessments. Work with teams to prioritize fixes and ensure proper testing before release.
Application Security (SCA, SAST, DAST):
Design, implement, and maintain application security testing programs. Reduce false positives and provide clear, actionable remediation guidance to development teams.
API Security:
Partner with engineering teams to ensure secure API design and implementation. Identify and mitigate API-specific risks, including authentication and authorization issues, data exposure, rate limiting gaps, and OWASP API Top 10 vulnerabilities.
AI Security (Guardrails, MCP Security):
Support secure AI adoption by defining AI security guardrails. Address risks such as prompt injection, insecure model usage, data leakage, and Model Context Protocol (MCP) security concerns.
Security Training:
Deliver guidance on secure coding practices, application, API, and AI security threats, and remediation techniques. Provide hands-on support during code reviews.
Collaboration & Release Management:
Partner with DevOps, QA, Engineering, Product, and Release Management teams to integrate security requirements and checks throughout development and release processes.
Continuous Improvement:
Stay current on emerging application, API, and AI security threats. Continuously improve security processes, tooling, and overall application security posture.
Reltio is proud to be an equal opportunity workplace. We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity or Veteran status. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. Reltio is committed to working with and providing reasonable accommodation to applicants with physical and mental disabilities.
Please mention you found this job on AI Jobs. It helps us get more startups to hire on our site. Thanks and good luck!
Understand the required skills and qualifications, anticipate the questions you may be asked, and study well-prepared answers using our sample responses.
Senior Application Security Engineer Q&A's