Application Security Engineer

Sonar, the leader in AI‑driven code review and verification, builds tools that keep software generated by AI assistants reliable, secure and maintainable for major enterprises. As an Application Security Engineer you will join the Information Security team that protects Sonar’s products and cloud services while demonstrating compliance with top‑tier security standards. In this role you will shape secure product and cloud designs, collaborating early with product and engineering groups to embed security into architecture and AWS environments. You will drive security assurance initiatives, manage independent assessments, penetration tests and red‑team exercises, and turn findings into actionable improvements and customer‑facing trust documents. You will also respond to customer security concerns, act as a subject‑matter expert during incidents, and continuously monitor threat intelligence to prioritize risks and automate security workflows. The position requires deep experience with application and cloud architectures—primarily AWS—plus a strong background in security assessments, code review, authentication and authorization design, and threat‑modeling methods such as STRIDE. Proven skills in penetration testing, red‑team work, bug‑bounty programs and vulnerability remediation are essential. Familiarity with AI‑related security, AI‑driven automation, and exposure to Azure, GCP or Google Workspace are advantageous. The role is based in Geneva, Switzerland, with relocation support for the right candidate.