Fortinet

Fortinet

Sr Applications Security Engineer

Sunnyvale, CA, United States · Senior · Full-time

No sponsorship$147k-$180kDetected 7 days ago
JavaScriptPythonJava.NETCode ReviewCI/CDOAuthMachine LearningLLMsRAGCybersecurityPenetration TestingNetwork SecurityAuditingResearch

Stay score

odds of building a lasting career here

59Sponsors, lottery-bound
Cap-exempt (no lottery)0
Sponsors this role82
Entry-level history0
PERM / green-card track0
Lottery odds (Level IV)94
Fits your clock70

Sponsors, but it's cap-subject — you still face the weighted lottery (~61% per draw at Level IV). Good if you win; have a cap-exempt backup on your list.

Lottery odds assume a STEM candidate.

Personalize to your clock →

Employer immigration record

from this employer's Department of Labor filings

Green-card filing pattern in this occupation

Context, not a finding about this posting: of this employer's 96 green-card filings in this occupation, 99% were for a worker who already held the job.

Green-card follow-through: 86%

Of 66 labor certifications old enough to have been used, 9 expired without the employer filing the next step. Median time from filing to decision: 488 days.99% of their filings were for a worker who already held the job.Only certifications past the 180-day window are counted — recent ones cannot have expired yet.

Sourced from Department of Labor LCA, PERM and prevailing-wage disclosure data. Employer matching is by name, so figures may be split across an employer's legal entities. Absence of a filing means none appears in our copy of the data, not that none exists.

Community outcomes

No reports yet — be the first to help the next applicant.

About the role

  • Application Security Engineer to join the Corporate Information Security team.
  • This is a highly technical role, with responsibilities conducting security reviews on various Fortinet applications, providing security education to our engineers and handling externally reported vulnerabilities.
  • Coach peers in application security concepts and best practices.

Responsibilities

  • Work closely with development teams, perform code reviews, penetration tests, and architectural reviews on existing codes and new features.
  • Develop, implement, and communicate vulnerability mitigation strategies to development teams
  • Drive Fortinet static and dynamic application security testing program.
  • Develop strategies, evaluate solutions, design and implement tools, processes and controls to ensure that security and privacy are designed in Fortinet applications
  • Solid understanding on CI/CD pipelines, build systems and DevSecOps principles.

Requirements

  • 3+ years of experience with manually auditing source code to find security issues or programming skills in one or more of: Java,.NET, Python or JavaScript frameworks.
  • Strong understanding on Cloud-Native application architecture, microservices, containerization technologies, secure deployment and implementation issues.
  • Strong understanding with AI&ML & LLM concepts like RAG, Agentic Workflows, MCPs, Skills, AI Red Teaming, AI Guardrails and Secure AI development and deployment strategies.
  • Experience with cloud-based security solutions and familiarity with cloud service providers, particularly in relation to application security
  • Experience working with threat modeling methodologies such as MITRE ATT&CK, STRIDE, PASTA etc.

Nice to have

  • Experience in Cloud Security Posture Management (CSPM) and/or Application Security Posture Management (ASPM) tools is a plus.
  • Having OSWE OSCP, GWEB, GPEN or similar certificate is a plus

Skills

  • 5+ years of work experience as an Information Security Researcher or Engineer
  • Strong understanding on OWASP TOP 10 vulnerabilities.
  • Strong understanding of common API security risks
  • Proven experience in application penetration testing
  • Proven experience in security code review
  • Proven experience in application security testing (DAST, SAST, IAST, SCA) tools and processes
  • Strong foundation in computer and network security, authentication & authorization, security protocols and applied cryptography
  • Solid understanding with web security standards such as CSP, SOP, CORS, and emerging web security technologies.
  • Experience defining security architecture patterns and standards in a large enterprise organization.

Compensation

  • The US base salary range for this full-time position is $147,000-$180,000.

Benefits

  • We offer a supportive work environment and a competitive Total Rewards package to support you with your overall health and financial well-being.

Company info

  • Join us in bringing solutions that make a meaningful and lasting impact to our 890,000+ customers around the globe.

Visa & Work Authorization

  • Must be authorized to work in the U.S. without sponsorship.
Apply directly at Fortinet →Create a free account for alerts like thisView Fortinet immigration profile

This listing is sourced directly from Fortinet's careers page and normalized into a canonical job model.