ZipRecruiter

Log In

1

Trainee Application Security Engineer Jobs in California

Opal

Application Security Engineer

San Francisco, CA · On-site

$69.25 - $92.50/hr

We're hiring an Application Security Engineer to own security across Opal's product and platform - and yes, own means what it sounds like. You'd be our dedicated security engineer, embedded directly ...

Fragomen

Security Engineer - Application Security

Ontario, CA · On-site

$59.75 - $79.75/hr

Fragomen is seeking a Security Engineer - Application Security to join our talented Cyber Security team in our Technology Innovation Lab in Pittsburgh. Our industry-leading, immigration specific ...

SpaceXAI

Application Security Engineer

Palo Alto, CA

$100K - $258K/yr

We are seeking a skilled and innovative Application Security Engineer to join our technology-driven company. In this role, you will be responsible for ensuring the security and integrity of our cloud ...

SpaceXAI

Application Security Engineer

Palo Alto, CA · On-site

$69.25 - $92.50/hr

They are seeking an innovative Application Security Engineer responsible for ensuring the security and integrity of cloud-native applications throughout the software development lifecycle, with a ...

SpaceXAI

Application Security Engineer

Palo Alto, CA

$100K - $258K/yr

We are seeking a skilled and innovative Application Security Engineer to join our technology-driven company. In this role, you will be responsible for ensuring the security and integrity of our cloud ...

SpaceXAI

Application Security Engineer

Palo Alto, CA · On-site

$100K - $258K/yr

We are seeking a skilled and innovative Application Security Engineer to join our technology-driven company. In this role, you will be responsible for ensuring the security and integrity of our cloud ...

Figure

Security Engineer, Application Security

San Jose, CA · On-site

$150K - $350K/yr

... Engineering, Information Systems, or equivalent years of experience in a related technical field * 3+ years of experience in the field of application security or related security role * Passion for ...

Figure

Security Engineer, Application Security

San Jose, CA · On-site

$150K - $350K/yr

... Engineering, Information Systems, or equivalent years of experience in a related technical field * 3+ years of experience in the field of application security or related security role * Passion for ...

Reltio

Staff Application Security Engineer

San Francisco, CA

$69.25 - $92.50/hr

The Staff Application Security Engineer will partner with the Engineering, DevOps, Product, and Release Management teams to embed security as a foundational part of software design and delivery. The ...

Heartflow

Application Security Engineer

San Francisco, CA · Hybrid

$145K - $180K/yr

We are looking for an Application Security Engineer to work with our engineering team to ensure security is an integral part of our Software Development Lifecycle (SDLC). In this role, you'll have ...

Figure

Security Engineer, Application Security

San Jose, CA · On-site

$68.75 - $92/hr

... Engineering, Information Systems, or equivalent years of experience in a related technical field • 3+ years of experience in the field of application security or related security role • Passion ...

Esri

Sr. Application Security Engineer

Redlands, CA · On-site

$59 - $79/hr

As an Application Security Engineer at Esri, you will fill a critical role in helping secure Esri's intellectual property and sensitive data against a variety of complex threats with support from all ...

Esri

Sr. Application Security Engineer

Redlands, CA · On-site

$59 - $79/hr

They are seeking a Sr. Application Security Engineer to enhance the security of their applications, collaborating with various teams to design security measures, perform testing, and provide guidance ...

Heartflow

Application Security Engineer

San Francisco, CA · On-site

$145K - $180K/yr

We are looking for an Application Security Engineer to work with our engineering team to ensure security is an integral part of our Software Development Lifecycle (SDLC). In this role, you'll have ...

Ivo

Lead Application Security Engineer

San Francisco, CA · On-site

$69.25 - $92.50/hr

They are seeking a Lead Application Security Engineer to own the security of the Ivo platform, ensuring the protection of sensitive contracts through hands-on testing, code review, and security ...

Ivo

Lead Application Security Engineer

San Francisco, CA · On-site

$220K - $300K/yr

The Opportunity We're hiring our first dedicated Lead Application Security Engineer to own the security of the Ivo platform end to end. You'll partner directly with our Head of IT & Security and ...

Esri

Sr. Application Security Engineer

Redlands, CA · On-site

$93K - $157K/yr

As an Application Security Engineer at Esri, you will fill a critical role in helping secure Esri's intellectual property and sensitive data against a variety of complex threats with support from all ...

next page

Showing results 1-20

All JobsApplication Security Engineer JobsTrainee Application Security Engineer JobsTrainee Application Security Engineer Jobs in California

Trainee Application Security Engineer information

What is the difference between Trainee Application Security Engineer vs Junior Application Security Engineer?

AspectTrainee Application Security EngineerJunior Application Security Engineer
CertificationsEntry-level, often no certifications required or basic security certificationsSome certifications preferred, such as CompTIA Security+ or CEH
Work EnvironmentTraining-focused, supervised tasks, learning phaseMore independent, handling security assessments and vulnerability testing
ResponsibilitiesAssisting in security audits, learning security tools, basic analysisConducting security scans, analyzing vulnerabilities, supporting security projects

While both roles involve security tasks, a Trainee Application Security Engineer is typically in a learning phase with supervised duties, whereas a Junior Application Security Engineer handles more independent security assessments and analysis, requiring some experience and certifications.

What are the most commonly searched types of Application Security Engineer jobs in California? The most popular types of Application Security Engineer jobs in California are:
What are popular job titles related to Trainee Application Security Engineer jobs in California? For Trainee Application Security Engineer jobs in California, the most frequently searched job titles are:
What job categories do people searching Trainee Application Security Engineer jobs in California look for? The top searched job categories for Trainee Application Security Engineer jobs in California are:
What cities in California are hiring for Trainee Application Security Engineer jobs? Cities in California with the most Trainee Application Security Engineer job openings:
Trainee Application Security Engineer jobs near you
Infographic showing various Trainee Application Security Engineer job openings in California as of July 2026, with employment types broken down into 67% Full Time, and 33% Contract. Highlights an 33% In-person, and 67% Remote job distribution.
Application Security Engineer

Application Security Engineer

Opal

San Francisco, CA • On-site

$69.25 - $92.50/hr

Full-time

Posted 8 days ago

Job description

About Opal Security:
At Opal, we're building modern identity governance for the AI era-intelligent access management that empowers enterprises to move fast while staying secure. Our mission is to bring clarity, control, and confidence to complex enterprise environments, helping teams govern access without slowing down innovation.
The Role:
Most security engineers spend their careers bolting locks onto doors that were already built. This is not that job.
We're hiring an Application Security Engineer to own security across Opal's product and platform - and yes, own means what it sounds like. You'd be our dedicated security engineer, embedded directly with engineering, writing production code in Go and TypeScript, and building security into the product while it's still being designed. You'll work closely with a team of engineers that genuinely care about getting this right, and a product that happens to be one of the most security-critical tools in enterprise software.
Oh, and one more thing: Opal is a security company. We sell access control to organizations that take security seriously. That means your work isn't a cost center - it's core to what we do.
This role lives on the Platform team and partners closely with Infrastructure Engineering on cloud security. It is explicitly scoped to application and product security - enterprise IT, compliance, and vendor risk management are handled separately.
What You'll Do:
Secure Development Lifecycle -
  • Own the secure SDLC end-to-end: threat modeling, design reviews, code reviews - you set the bar
  • Run and coordinate app pentests (internal and external) and drive findings to closure
  • Build and own SAST/DAST/SCA tooling wired into CI/CD so security ships with the code
  • Triage and remediate vulnerabilities from every angle - bug bounty, internal scans, the works

Software Security Engineering -
  • Build and maintain the security-critical stuff: encryption services, authz enforcement, authn flows
  • Own the Auth0 ↔ Opal integration - tokens, sessions, MFA, SSO (SAML, OIDC, OAuth 2.0)
  • Ship production Go and TypeScript to harden APIs, enforce least-privilege, and close vuln classes for good
  • Create shared libraries that make the secure path the easy path for every product engineer

Incident Response & Cloud Security -
  • Be first on the scene for security incidents: investigate, contain, find the root cause, fix it
  • Partner with Infra on cloud hardening - AWS IAM, EKS, KMS, network segmentation
  • Level up detection and response by writing detection rules and improving logging and alerting

Security Culture -
  • Mentor engineers on secure coding, common vuln patterns, and security architecture - you make the org smarter
  • Help set the security roadmap by grounding it in real product risk
  • Be the security teammate engineers want to work with - a collaborator, not a bottleneck

You Might Be a Fit If You:
  • Have 4+ years in application security or software security engineering
  • Actually write production code - findings reports are the floor, not the ceiling
  • Know auth cold: OAuth 2.0, OIDC, SAML, session management, token lifecycle
  • Are comfortable in AWS and containerized environments (Kubernetes, Docker)
  • Bonus points for familiarity with our stack: Go, TypeScript, React, PostgreSQL, Redis, GraphQL
  • Have led complex, cross-functional security initiatives from kickoff to completion
  • Have run or participated in external pentests and seen findings through remediation
  • Thrive on ownership and ambiguity - you'd rather write the playbook than wait for one

Apply