Senior Application Cybersecurity Engineer

Position Overview

Gallup is seeking a senior application cybersecurity engineer who thrives at the intersection of engineering and security. In this role, you’ll apply deep offensive security expertise to test Gallup's products, collaborate with developers, and transform findings into secure, resilient applications. You will have the autonomy to innovate, the responsibility to safeguard critical systems and the opportunity to make a lasting impact on how security scales across the organization.

Key Responsibilities

• Review and advise on secure architecture and design for SaaS applications built and hosted in AWS.
• Perform penetration testing across web, mobile, and API applications to identify and validate security vulnerabilities.
• Partner with engineering teams to integrate security from the start via secure coding guidance, reviews, and awareness.
• Employ static code analysis and thorough code reviews to uncover vulnerabilities early in the development process.
• Secure open-source and third-party components using software composition analysis (SCA) and package management best practices.

Required Qualifications

• Bachelor's degree in cybersecurity, information assurance, computer science, or a related field.
• At least five years of experience in enterprise application security engineering.
• Demonstrated deep expertise in mobile, web, and API penetration testing.
• Hands-on experience with secure SaaS (web, API, mobile) design.
• Proficiency with SAST and thorough code reviews.
• Strong programming or scripting skills in at least one language (e.g., Python, JavaScript, C#, Java).
• A commitment to working on-site at Gallup's San Francisco office at least three days a week.

Preferred Qualifications

• Expertise in securing software supply chains and managing open-source dependencies through effective SCA practices.
• Certifications such as OSWE, OSCP, GWAPT, and GXPN.
• Clear communication – turning complex risks into clear, actionable guidance.
• A self-starter mindset with the ability to work independently and collaborate effectively.
• Impactful speed – moving quickly without cutting corners, ensuring durable results.
• Adaptive focus – staying effective across shifting priorities and varied demands.
• Calm under pressure – providing clarity and steadiness during urgent incidents.
• Persistence and precision in solving challenging security issues with practical, scalable solutions.

Benefits & Perks

• Medical, dental, vision, life, and other insurance options.
• Fully vested 401(k) retirement savings plan with company matching.
• Employee stock ownership program.
• Mass transit reimbursement, family-building benefits, and an employee assistance program.
• Compensation: Estimated annual salary range of $150,000 - $200,000.