---
title: 'Staff Application Security Engineer at Censys'
canonical: 'https://feeny.ai/job/staff-application-security-engineer-censys-united-states-g6haaex583t6'
type: 'job'
last_seen: '2026-09-05'
---

# Staff Application Security Engineer at Censys

- **Company:** Censys
- **Location:** United States
- **Work type:** remote
- **Posted:** 2026-07-28
- **Last confirmed live:** 2026-09-05
- **Apply:** https://job-boards.greenhouse.io/censys/jobs/8649187002

## Job description

Company Background

Censys’ mission is to be the one place to understand everything on the internet. Frustrated by the lack of trustworthy Internet intelligence, we set out to create the industry’s most comprehensive, accurate, and up-to-date map of the Internet. Today, Censys delivers real-time Internet intelligence and actionable threat insights to global governments, over 50% of the Fortune 500, and leading threat intelligence providers worldwide.

Location:

This position is remote within the United States or Canada.

At Censys, we’re on a mission to provide best in class internet visibility and intelligence to the global security community. Our platform helps security teams uncover hidden threats, gain actionable insights, and build proactive defense strategies. Trusted by organizations worldwide, Censys cuts through the noise to surface the most critical risks, enabling teams to respond faster, and stay ahead of attackers. We’re constantly pushing the boundaries of what’s possible to help our customers see and secure the internet more clearly than ever before.

Role Summary:

Censys is seeking a Staff Application Security Engineer to join our Infrastructure and Operations Platform (SRE) team. In this role, you’ll own the application security strategy for how Censys builds and ships software — designing the secure paths, guardrails, and automation that let our engineers develop and deploy quickly, confidently, and securely. You’ll set technical direction across the software lifecycle, from infrastructure-as-code and container security to secure deployment workflows and the security of our AI/ML-enabled services. As a security company, we hold ourselves to the standard we help our customers achieve; this role is central to making that real. We expect all of our employees to consider customer happiness as our primary goal and to come to work every day eager to learn and educate, helping to make us a better organization every day.

What You’ll Do:

- Own and drive the AppSec/DevSecOps program roadmap across engineering, defining the strategy for embedding security into the SDLC through shift-left practices, paved roads, and automation rather than gates
- Design, build, and maintain DevSecOps tooling in Kubernetes and Google Cloud Platform (GCP), including support for AI/ML workloads
- Lead the integration of security into CI/CD pipelines — code scanning, secret detection, software composition analysis, and infrastructure policy enforcement — partnering with engineering teams to adopt them without friction
- Deliver capabilities such as hardened service templates, secure service catalogs, and guardrails that reduce developer cognitive load and risk across the organization
- Set the security architecture direction for AI/ML workflows, implementing controls around model training, deployment, and inference pipelines, including access control, artifact validation, input/output sanitization, and model provenance tracking
- Partner with CorpSec on company security and compliance initiatives, owning the engineering side of the requirements by designing and implementing controls for SOC 2 and ISO27001 audit readiness, as well as improving tooling around BCDR, infrastructure policies, and service inventory accuracy
- Provide technical leadership and mentorship, raising the security bar through design reviews, threat modeling, and pragmatic guidance to engineers across all teams
- Participate in a shared on-call rotation with the Infrastructure and SRE teams, supporting production uptime and security incident response readiness

What You’ll Bring:

- 10+ years of experience in Security Engineering, DevSecOps, SRE, or related roles, with a track record of leading security initiatives that span multiple teams
- Deep expertise securing Kubernetes environments, including container images, network policies, and supply chain protections (e.g., Helm, Crossplane)
- Strong experience with Application Security tooling — dependency scanning, static analysis, and policy enforcement — integrated into CI/CD pipelines such as GitHub Actions and ArgoCD, and the ability to bridge engineering practices with Security Operations
- Strong understanding of attacker tactics, techniques, and procedures (TTPs), and familiarity with frameworks like MITRE ATT&CK
- Strong grasp of cloud services (GCP preferred), especially securing data pipelines, model hosting endpoints, and related infrastructure
- Proficiency with Infrastructure-as-Code (Terraform, Crossplane, or similar) and security scanning for cloud resources
- Proficiency with scripting and automation (e.g., Python, Bash)
- The ability to thoughtfully participate in technical discussions and drive towards data-driven decisions amidst ambiguity and competing priorities
- Strong communication skills and empathy for developer needs, with a demonstrated ability to embed secure practices without creating friction

What Sets You Apart:

- Experience building or scaling an AppSec or DevSecOps program from early maturity, including establishing paved roads and measuring adoption
- Familiarity with commercial security platforms such as Orca Security (CNAPP/cloud security posture) and Aikido Security (application security scanning) is a plus
- Experience securing ML toolchains (e.g., TensorFlow, PyTorch) and familiarity with AI-specific threats such as data leakage, model inversion, prompt injection, and adversarial inputs
- Hands-on experience integrating and managing Web Application Firewalls (WAF), anti-DDoS systems, and edge protection technologies
- Familiarity with monitoring and observability systems (e.g., Prometheus, Grafana, OpenTelemetry) with a focus on detecting security anomalies
- Familiarity with AI governance and compliance standards (e.g., EU AI Act, NIST AI Risk Management Framework)
- Strong interest in harnessing AI and LLM tools as a force multiplier — using them to code smarter, iterate faster, boosting productivity and enhancing product capabilities

For high cost of living areas (San Francisco Bay, New York City, and Seattle), the expected salary range for this position is $198,000 USD – $233,000 USD, plus bonus eligibility and equity.

For all other US locations, the expected salary range for this position is $172,000 USD – $216,000 USD, plus bonus eligibility and equity.

Job level and actual compensation will be decided based on factors including, but not limited to, individual qualifications objectively assessed during the interview process (including skills and prior relevant experience, potential impact, and scope of role), market demands, and specific work location. The listed range is a guideline, and the range for this role may be modified. For roles that are available to be filled remotely, the pay range is localized according to employee work location by a factor of between 83% and 100% of range. Please discuss your specific work location with your recruiter for more information.

Censys offers a competitive benefits package to employees, including equity, health, dental & vision coverage, retirement with company contribution, parental leave, mental health & wellness benefits, flexible PTO, and a professional development stipend. Censys also offers sales incentive pay for most sales roles and an annual bonus plan for eligible non-sales roles. Censys’s compensation and benefits are subject to change and may be modified in the future. Please see our [careers page](https://censys.com/careers/) for more details.

We will work to ensure individuals with disabilities are provided reasonable accommodation to apply for a role, participate in the interview process, perform essential job functions, and receive other benefits and privileges of employment. If you require accommodation, please reach out to your recruiter. These modifications enable an individual with a disability to have an equal opportunity not only to get a job, but successfully perform their job tasks to the same extent as people without disabilities.

To ensure the integrity of our hiring process and facilitate a more personal connection, we require all candidates to keep their cameras on during video interviews. Additionally, if hired, we would love to bring you to our HQ in Ann Arbor for in-person onboarding.

By applying for this job, the candidate acknowledges and agrees that any personal data contained in their application or supporting materials will be processed in accordance with our [Censys Privacy Policy](https://censys.com/privacy-policy/).

Our roots are in Ann Arbor, Michigan and our innovation is fueled by the team’s global perspectives. For this role, we are open to remote employees across the continental US. We value diversity and are committed to creating an inclusive environment for all employees. Censys is an [equal opportunity employer](https://www.eeoc.gov/sites/default/files/2022-10/EEOC_KnowYourRights_screen_reader_10_20.pdf).

## #LI-DNI

Note to external recruiters/agencies: We are not currently engaging with third-party agencies for this role and will not accept unsolicited outreach. We kindly ask that you do not submit resumes or candidate profiles to our team. Identity Verification

As part of our hiring process, all candidates who receive an offer of employment will be asked to complete an identity verification through CLEAR.

California Privacy Rights Notice

Pursuant to the California Consumer Privacy Act (CCPA), we are providing you with notice that we collect personal information from job applicants for business purposes, including evaluating your candidacy for employment, conducting interviews, and, if applicable, completing the hiring process. The categories of information we may collect include identifiers (such as name and contact information), professional or employment-related information (such as work history, education, and references), and other information you provide in your application. We do not sell or share your personal information. For more information on how we use and protect your personal information, and your rights under the CCPA, please refer to our [Privacy Policy](https://censys.com/privacy-policy#:~:text=California%20resident%20rights).

## About Censys

## Company Overview
- **One-liner**: Censys provides real-time intelligence and insights on global Internet infrastructure to help security teams uncover risks, respond to incidents, and prevent breaches.
- **Entity Type**: Private (venture-backed – see PitchBook profile)
- **Headquarters**: Ann Arbor, Michigan, USA (primary); additional offices in Los Altos, CA; Kirkland, WA; and Tysons Corner, VA
- **Founded**: 2017
- **Founders**: Founded by researchers and cybersecurity practitioners from the University of Michigan, including Zakir Durumeric (inventor of ZMap) [censys.com/about](https://censys.com/about-censys/)

## Core Business
- **Primary industry**: Cybersecurity (Internet intelligence, attack surface management, adversary investigation)
- **Target customers**: B2B – Governments (federal/state), Global 2000 enterprises, cybersecurity companies, critical infrastructure operators, and MSSPs
- **Mission**: “To make the internet a safer place” [censys.com/about](https://censys.com/about-censys/)

## Products & Services
- **Censys Platform**: A comprehensive tool for understanding organizational exposure, dependencies, blind spots, and attacker infrastructure. Includes:
  - **Attack Surface Management (ASM)**: Continuously identifies and monitors all internet-facing assets tied to an organization, including unknown assets, and prioritizes remediation based on real risk.
  - **Adversary Investigation**: Provides structured, contextualized data on threat actor infrastructure to detect compromises, uncover attacker-controlled systems, and identify attack methods.
  - **Critical Infrastructure Monitoring**: Monitors and remediates internet exposure of industrial control systems (ICS) and other national critical infrastructure.
  - **Cloud Asset Discovery**: Discovers and manages cloud footprints to eliminate blind spots, manage shadow IT, and defend against threats.
  - **Risk Awareness for M&A**: Assesses cybersecurity posture of subsidiaries and potential acquisitions.
- All offerings are SaaS/cloud-based, built on the proprietary **Censys Internet Map** – a continuously updated, real-time global map of all internet-connected infrastructure. [censys.com](https://censys.com/)

## Market Standing
- **Valuation/Market Cap**: Not publicly disclosed. The company is privately held; PitchBook maintains a profile with funding and valuation data [pitchbook.com](https://pitchbook.com/profiles/company/233464-78).
- **Key Metric** (Private): Total community users >350,000; growing international presence including Nordics, France, Australia, Singapore, Japan [censys.com/about](https://censys.com/about-censys/).
- **Notable Investors/Partners**: Not explicitly listed on public site, but trusted by governments, Global 2000, and cybersecurity companies worldwide [censys.com](https://censys.com/).
- **Growth Signals**: Launched new scanning engine with proprietary technology; expanded globally (multiple new country markets); introduced AI/ML capabilities; growing headcount with offices in four US tech hubs.

## Competitive Advantages
- **Data Depth & Freshness**: Maintains the industry’s only comprehensive, real-time map of global Internet infrastructure, continuously updated via proprietary scanning technology (origin: ZMap from University of Michigan).
- **Researcher Roots & Community Trust**: Originated from academic research; trusted by the security community for unbiased, high-fidelity intelligence.
- **Full Visibility Suite**: Combines ASM, adversary tracking, cloud discovery, and critical infrastructure monitoring in one platform, reducing tool sprawl.
- **Attacker Perspective**: Delivers the same view of infrastructure that threat actors see, enabling proactive defense.

## Strategic Focus
- **AI & ML Integration**: Expanding AI/ML capabilities to deliver deeper, faster security insights [censys.com/about](https://censys.com/about-censys/).
- **Global Expansion**: Continuing to grow footprint in key international markets (APAC, Europe, etc.).
- **Protecting Critical Infrastructure**: Deepening capabilities for ICS/SCADA and government customers, especially given the Tysons Corner office proximity to federal clients.

## Why Work Here
- **Culture & Values**: Emphasizes being relentless, empowering, stewards of a safer internet, and leaders. Strong sense of purpose – “making the internet safer” is the central mission.
- **Work Flexibility**: “Where Works for You” policy – multiple office locations (Ann Arbor, Los Altos, Kirkland, Tysons Corner) and the language suggests hybrid/remote flexibility.
- **Benefits**: 401(k) with employer match; medical, dental, vision insurance; flexible PTO and sick leave; annual professional development credit; wellness credit and EAP; 14 weeks paid leave for birthing employees, 6 weeks for non-birthing at 100% pay.
- **Engineering Culture**: Deeply technical origin (ZMap research), data-driven, and practitioner-focused. Encourages contributions to the security community and open research.
- **Teams**: Small but growing; opportunities to work across multiple security domains (internet scanning, threat intelligence, cloud security, ICS). [censys.com/careers](https://censys.com/careers/)

## Sources
1. [censys.com](https://censys.com/)
2. [censys.com/about](https://censys.com/about-censys/)
3. [censys.com/careers](https://censys.com/careers/)
4. [linkedin.com/company/censysio](https://www.linkedin.com/company/censysio)
5. [pitchbook.com](https://pitchbook.com/profiles/company/233464-78)

## Other roles at Censys

- [Technical Content Specialist](https://feeny.ai/job/technical-content-specialist-censys-remote-dw06bvstqbwd)
- [Federal Account Executive, Named Accounts (DOW)](https://feeny.ai/job/federal-account-executive-named-accounts-dow-censys-dmv-area-a70sjag1tex4) — DMV Area
- [Solutions Engineer, Dubai](https://feeny.ai/job/solutions-engineer-dubai-censys-dubai-f45p7tmkp6tb) — Dubai, United Arab Emirates
- [Enterprise Solutions Engineer, Chicago](https://feeny.ai/job/enterprise-solutions-engineer-chicago-censys-chicago-32aq4d89s612) — Chicago, IL
- [Enterprise Solutions Engineer, Texas](https://feeny.ai/job/enterprise-solutions-engineer-texas-censys-texas-pzhsh4agkvc2) — Texas
- [Distributed Systems Engineer (Data Platform)](https://feeny.ai/job/distributed-systems-engineer-data-platform-censys-united-states-canada-a6cwbcqe8gvy) — United States / Canada
- [Distributed Systems Engineer (Data Platform)](https://feeny.ai/job/distributed-systems-engineer-data-platform-censys-united-states-canada-6kycg5j8748f) — United States / Canada
- [Distributed Systems Engineer (Data Platform)](https://feeny.ai/job/distributed-systems-engineer-data-platform-censys-united-states-canada-1ppeefmq739d) — United States / Canada
- [Product Marketing Manager, Exposure Management](https://feeny.ai/job/product-marketing-manager-exposure-management-censys-remote-vwc5jyjy2bwx)
- [Director, Product Management](https://feeny.ai/job/director-product-management-censys-united-states-canada-4s98tbcps7ck) — United States / Canada