Security Engineer (Application Security)

• The Security Team is responsible for securing all things Sentry: our customers, our code, and everything in between. We are a small but growing team with broad scope, high trust, and the autonomy to tackle hard security problems with creativity and an engineering mindset

• We work at a company with a strong developer culture, building a product that millions of developers genuinely love and rely on. That context shapes everything about how we operate

• As a Security Engineer on this team, you’ll work across application and platform security domains

• You’ll contribute to the practices that keep Sentry secure as we grow: security reviews, threat modeling, vulnerability management, and embedding secure coding practices into an engineering organization that cares about doing things right

• You’ll partner closely with product and engineering teams to influence how features are designed and built from the start. You will work as a technical collaborator who helps make the secure path the obvious one. As Sentry expands our agentic product capabilities and development practices, you’ll also find yourself at the frontier of a new set of security challenges

• Support and help mature Sentry’s security review program. From secure code review, to architecture review, and threat modeling. You’ll help build the processes, tooling, and culture which make security a natural part of how we ship and operate

• Contribute to mature vulnerability management practices. Intake, triage, prioritization, remediation tracking, and support of our bug bounty and responsible disclosure program

• Advocate for secure-by-design principles. Partner with engineering and product teams to embed security early in the development lifecycle and integrate security tooling into developer and CI/CD workflows

• Validate and reproduce application and infrastructure security findings. Scanning, manual testing, and supporting penetration testing and vulnerability validation across Sentry’s application, SDKs and cloud-based platform

• Help evaluate and respond to emerging threats relevant to application security at Sentry. We build and operate a complex application and cloud environment, including the novel attack surface introduced by Sentry’s agentic product features and AI-assisted engineering practices

Benefits

• Competitive Compensation + Equity

• Medical, Dental, Vision Insurance

• Commuter Stipend

• Professional Development Stipend

• Health & Wellness Benefits

• Charitable Matching Program

• Flexible PTO

• Paid Parental Leave

• 401k Plan- Thrive with ownership and want more of it, you prefer to drive work end-to-end, and you’re energized by the autonomy — and the mentorship — that comes with being on a small, high-trust team

• Love working in a developer-forward culture where your colleagues are builders who care deeply about code quality and customer satisfaction

• Enjoy operating cross-functionally, building relationships, and influencing with technical expertise as you grow into shaping how security gets done across a fast-moving engineering organization

• Reach for automation first, you’d rather build a scalable, systematic solution to a security problem than solve it manually a hundred times

• Get excited when something new lands on your desk, be it an interesting vulnerability, a sweet exploit, a novel agentic architecture, an unfamiliar cloud primitive, or a bug class you haven’t seen before

• 2+ years of industry experience designing, building, or securing complex applications and cloud systems

• Hands-on experience with several of the following: security reviews, SDLC practices, secure CI/CD, architecture reviews, threat modeling, vulnerability management, bug bounty and responsible disclosure programs

• Degree in Computer Science or a related field, equivalent training, or professional experience

• A collaborative approach to problem solving paired with strong written and verbal communication

• Experienced and comfortable programming in at least one language, and able to read and reason about code in Python, Typescript, Go, or Rust

• Familiarity with using distributed cloud technology (AWS, GCP, Azure, Kubernetes, Docker, Terraform, etc.) and an understanding of how those technologies are secured (cloud networking, IAM, etc.)

• Not sure if you meet 100% of the qualifications? We encourage you to apply anyway. We’re interested in people are excited about this opportunity and eager to grow