Application Security Engineer, VDC

<div class="content-intro"><div class="elementToProof">Veeam, the #1 global market leader in data resilience, believes businesses should control all their data whenever and wherever they need it. Veeam provides data resilience through data backup, data recovery, data portability, data security, and data intelligence. Based in Seattle, Veeam protects over 550,000 customers worldwide who trust Veeam to keep their businesses running. Join us as we move forward together, growing, learning, and making a real impact for some of the world’s biggest brands. The future of data resilience is here - go fearlessly forward with us.</div></div>We are looking for an Application Security Engineer to join our growing team of experts supporting our cloud-native SaaS platform. The SaaS solutions we develop and offer to our customers are built on Microsoft Azure, delivering secure, scalable, and enterprise-grade data protection services. This role will focus on building and maturing our identity and access management (IAM) strategy across our Azure multi-tenant applications.Your tasks will include:<ul><li style="font-size: 12pt;">Designing and securing authentication and authorization flows across Azure multi-tenant enterprise applications</li><li style="font-size: 12pt;">Driving adoption of secure identity patterns, including OAuth2, OpenID Connect, and SAML</li><li style="font-size: 12pt;">Integrating and securing Azure Entra ID (formerly Azure AD), including App Registrations, App Roles, consent frameworks, and Graph API</li><li style="font-size: 12pt;">Implementing and refining Role-Based Access Control (RBAC), Just-in-Time access (PIM), and conditional access policies</li><li style="font-size: 12pt;">Conducting threat modeling and security reviews for IAM architecture and features</li><li style="font-size: 12pt;">Collaborating with engineering and platform teams to harden identity surfaces and enforce least privilege access</li><li style="font-size: 12pt;">Contributing to access management audit support for compliance frameworks such as FedRAMP, SOC 2, and ISO 27001</li></ul>Technologies we work with:<ul><li style="font-size: 12pt;">Azure Entra ID, Microsoft Graph API, Azure App Registrations, API Management</li><li style="font-size: 12pt;">Azure Functions, Cosmos DB, Azure Storage, Static Web Apps</li><li style="font-size: 12pt;">Atlassian Suite, Azure DevOps, GitHub</li><li style="font-size: 12pt;">IaC tools: Terraform, Azure ARM templates</li><li style="font-size: 12pt;">CI/CD: Azure DevOps Pipelines, GitHub Actions</li><li style="font-size: 12pt;">Observability: Azure Monitor, AppInsights, Elastic Cloud (ELK)</li></ul>What we expect from you:<ul><li style="font-size: 12pt;">3+ years of experience in Application Security, Identity Engineering, or Cloud Security with a focus on IAM</li><li style="font-size: 12pt;">Demonstrated hands-on experience with Azure Entra ID, including multi-tenant SaaS identity integrations</li><li style="font-size: 12pt;">Strong understanding of modern identity standards: OAuth2, OIDC, SAML, SCIM</li><li style="font-size: 12pt;">Familiarity with Microsoft Graph API, App Permissions, and Azure RBAC models</li><li style="font-size: 12pt;">Experience designing and securing Azure PaaS applications</li><li style="font-size: 12pt;">Proven ability to support engineering and SRE teams with secure identity practices</li><li style="font-size: 12pt;">Experience working in CI/CD environments with integrated security tooling</li><li style="font-size: 12pt;">Fluent English, with the ability to collaborate with globally distributed teams</li></ul>Will be an advantage:<ul><li style="font-size: 12pt;">Experience leading or supporting SaaS compliance programs (FedRAMP, SOC 2, ISO 27001)</li><li style="font-size: 12pt;">Familiarity with threat modeling methodologies (STRIDE, LINDDUN)</li><li style="font-size: 12pt;">Experience with C#/.NET/GO and securing authentication flows in application code</li><li style="font-size: 12pt;">Working knowledge of AWS identity services (IAM, Cognito, STS) a plus</li><li style="font-size: 12pt;">Understanding of cryptography in application contexts (certificates, token signing, etc.)</li></ul>I and data platform that sits at the heart of cloud-native backup infrastructure—where intelligence meets exabyte-scale datasets. We are looking for an AI Application Security Engineer to join our growing team of experts for our SaaS platform and work closely with our VDC Intelligence team. The SaaS solutions we develop and offer to our customers are built on Microsoft Azure offering best-in-class Data Protection services.    As an AI Application Security Engineer in the Veeam Data Cloud org, you'll design and own the security threat model for our VDC Intelligence team.  We’re building production systems that help to discover and understand data so as to make organizations more resilient. You’ll be asked to investigate and share AI security best practices, working closely with our AI engineers to deliver secure products across multiple Veeam services. <h3> Why This Role Is Unique </h3><ul><li style="font-size: 12pt;" data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}" data-aria-posinset="1" data-aria-level="1">Greenfield Opportunity: Many of our workflows, including secure semantic discovery at scale, are industry firsts. You’ll be a part of the team, inventing and defining and securing them from day 1.</li><li style="font-size: 12pt;" data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}" data-aria-posinset="1" data-aria-level="1">The Data is Real—and Huge: We work with exabyte-scale backup data from some of the world’s largest enterprises. It’s heterogeneous, richly structured, multilingual, and full of opportunities for insight.  </li><li style="font-size: 12pt;" data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}" data-aria-posinset="1" data-aria-level="1">Production AI, Securely: You’ll be helping to secure end-to-end, customer-facing capabilities—not just research prototypes. These systems will be measured in uptime, relevance, and ROI. </li></ul>Your tasks will include: You won’t be responsible for all of these at once—but you should be excited to jump into any of them: <ul><li style="font-size: 12pt;" data-leveltext="" data-font="Symbol" data-listid="2" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}" data-aria-posinset="1" data-aria-level="1">Integrate security throughout all steps of the SDLC </li><li style="font-size: 12pt;" data-leveltext="" data-font="Symbol" data-listid="2" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}" data-aria-posinset="1" data-aria-level="1">Keep an eye out for zero-day exploits/attack vectors in the AI space, red-team our products, own the security threat model for VDC Intelligence  </li><li style="font-size: 12pt;" data-leveltext="" data-font="Symbol" data-listid="2" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}" data-aria-posinset="1" data-aria-level="1">Help define and accelerate AI security review processes  </li><li style="font-size: 12pt;" data-leveltext="" data-font="Symbol" data-listid="2" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}" data-aria-posinset="1" data-aria-level="1">Automation of the deployments, and maintenance of a SaaS Application Security program and platform  </li><li style="font-size: 12pt;" data-leveltext="" data-font="Symbol" data-listid="2" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}" data-aria-posinset="1" data-aria-level="1">Continuous evaluation and improvement of the reliability, security and compliance of our systems and code  </li><li style="font-size: 12pt;" data-leveltext="" data-font="Symbol" data-listid="2" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}" data-aria-posinset="1" data-aria-level="1">Proactively meet standards for information security and compliance, such as FedRAMP, ISO (International Standards Organization), SOX (Sarbanes Oxley), SSAE (Standards for Attestation Engagements) 16, etc.   </li><li style="font-size: 12pt;" data-leveltext="" data-font="Symbol" data-listid="2" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}" data-aria-posinset="1" data-aria-level="1">Shepherd the definition, documentation, and improvement of our internal standards security and resiliency </li></ul>What we expect from you: <ul><li style="font-size: 12pt;" data-leveltext="" data-font="Symbol" data-listid="3" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}" data-aria-posinset="1" data-aria-level="1">Exposure to LLMs, or AI-based summarization/extraction pipelines in production environments </li><li style="font-size: 12pt;" data-leveltext="" data-font="Symbol" data-listid="3" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}" data-aria-posinset="1" data-aria-level="1">Experience with Security and Compliance Native and Off-the-Shelf toolsets (Sentinel, SAST, DAST, CNAPP and Cloud Security PaaS tools) </li><li style="font-size: 12pt;" data-leveltext="" data-font="Symbol" data-listid="3" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}" data-aria-posinset="1" data-aria-level="1">Experience with implementation, maintenance, and support of CI/CD practices and tools (Azure DevOps, GitHub Actions or similar)  </li></ul>Will be an advantage: <ul><li style="font-size: 12pt;" data-leveltext="" data-font="Symbol" data-listid="4" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}" data-aria-posinset="1" data-aria-level="1">Significant experience implementing secure design principles within a modern SDLC framework, directly supporting the security and compliance of Engineering and SRE teams, with 2+ years focused on AI/ML systems </li><li style="font-size: 12pt;" data-leveltext="" data-font="Symbol" data-listid="4" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}" data-aria-posinset="1" data-aria-level="1">Experience managing Azure IaaS (Infrastructure as a Service) and PaaS (Platform as a Service) solutions  </li><li style="font-size: 12pt;" data-leveltext="" data-font="Symbol" data-listid="4" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}" data-aria-posinset="1" data-aria-level="1">Exposure to agent architectures (e.g., Model Context Protocol, Agent to Agent) </li></ul>We offer:<ul><li style="font-size: 12pt;">Unlimited PTO</li><li style="font-size: 12pt;">3 global VeeaMe Days per year: company-wide closures for employees to take a break, disconnect, and focus on self-care </li><li style="font-size: 12pt;">Paid Holidays </li><li style="font-size: 12pt;">Veeam Care Days: 24 hours paid time for volunteering </li><li style="font-size: 12pt;">Medical, dental, and vision coverage starting on day one (multiple plan options) </li><li style="font-size: 12pt;">Flexible Spending Accounts (FSA) and Health Savings Account (HSA) options </li><li style="font-size: 12pt;">Employer HSA contributions (for HDHP participants) </li><li style="font-size: 12pt;">Life and AD&D insurance (employee, spouse/partner, and child options) </li><li style="font-size: 12pt;">Company-paid short-term and long-term disability insurance </li><li style="font-size: 12pt;">Supplemental individual disability insurance (IDI) </li><li style="font-size: 12pt;">Family planning support: fertility, adoption, surrogacy, and parental resources </li><li style="font-size: 12pt;">Paid parental leave</li><li style="font-size: 12pt;">Employee Assistance Program  </li><li style="font-size: 12pt;">Additional voluntary benefits: accident, critical illness, hospital indemnity, legal, identity theft protection, commuter benefits, pet care </li><li style="font-size: 12pt;">Mental health support  </li><li style="font-size: 12pt;">401(k) plan</li><li style="font-size: 12pt;">Professional training and education, on-demand learning libraries (LinkedIn Learning, O’Reilly), mentoring, workshops, and Global Day of Learning </li></ul>Please note: If the applicant is permanently present outside of the United States, Veeam reserves the right to refuse to consider the application for a job. Remote work is only possible in case the employee is located in the United States.#LI-Remote <div class="content-pay-transparency"><div class="pay-input"><div class="description">The salary range posted is On Target Earnings (OTE), which is inclusive of base and variable pay. When making an offer of employment, Veeam will take into consideration the candidate’s expectations, experience, education, scope of responsibility for the role, and the current market demands.</div><div class="title">United States of America Pay Range</div><div class="pay-range">$136,500—$195,000 USD</div></div></div><div class="content-conclusion"><div data-pm-slice="1 1 ["ul",null,"li",{"style":null,"checked":null,"value":null,"displayValue":null,"backgroundColor":null,"color":null,"listStyleType":null}]" data-en-clipboard="true"><hr></div><div data-pm-slice="1 1 ["ul",null,"li",{"style":null,"checked":null,"value":null,"displayValue":null,"backgroundColor":null,"color":null,"listStyleType":null}]" data-en-clipboard="true">Veeam Software is an equal opportunity employer and does not tolerate discrimination in any form on the basis of race, color, religion, gender, age, national origin, citizenship, disability, veteran status or any other classification protected by federal, state or local law. All your information will be kept confidential.</div><div data-pm-slice="1 1 ["ul",null,"li",{"style":null,"checked":null,"value":null,"displayValue":null,"backgroundColor":null,"color":null,"listStyleType":null}]" data-en-clipboard="true">Please note that any personal data collected from you during the recruitment process will be processed in accordance with our <a href="https://www.veeam.com/recruiting-privacy-notice.html">Recruiting Privacy Notice</a>.  The Privacy Notice sets out the basis on which the personal data collected from you, or that you provide to us, will be processed by us in connection with our recruitment processes. By applying for this position, you consent to the processing of your personal data in accordance with our <a href="https://www.veeam.com/recruiting-privacy-notice.html">Recruiting Privacy Notice</a>. By submitting your application, you acknowledge that the information provided in your job application and any supporting documents is complete and accurate to the best of your knowledge. Any misrepresentation, omission, or falsification of information may result in disqualification from consideration for employment or, if discovered after employment begins, termination of employment.</div><a id="app"></a></div>

Application Security Engineer, VDC

USA Remote Jobs