Security Engineer, Application Security

Details

About Sentry

Sentry helps developers fix errors and performance issues before users notice, enabling teams to spend less time firefighting and more time building. Trusted by more than 200,000 organizations, Sentry is an application monitoring standard and is building its AI-native future.

The Security Team is responsible for securing Sentry's customers, code, and infrastructure. This role works across application and platform security domains, contributing to security reviews, threat modeling, vulnerability management, and secure coding practices. You will partner with product and engineering teams to influence how features are designed and built securely, including addressing security challenges related to agentic product capabilities and AI-assisted engineering practices.

Responsibilities

• Support and help mature Sentry's security review program, including secure code reviews, architecture reviews, and threat modeling.
• Build processes, tooling, and culture that make security a natural part of how Sentry ships and operates.
• Contribute to vulnerability management, including intake, triage, prioritization, remediation tracking, bug bounty, and responsible disclosure programs.
• Advocate for secure-by-design principles and partner with engineering and product teams to embed security early in the development lifecycle.
• Integrate security tooling into developer workflows and CI/CD workflows.
• Validate and reproduce application and infrastructure security findings through scanning and manual testing.
• Support penetration testing and vulnerability validation across Sentry's applications, SDKs, and cloud-based platform.
• Evaluate and respond to emerging application security threats, including those involving agentic product features and AI-assisted engineering practices.
• Build scalable, systematic automation for security problems.
• Work cross-functionally with engineering and product teams as a technical collaborator.

Requirements

• 2+ years of industry experience designing, building, or securing complex applications and cloud systems.
• Degree in Computer Science or a related field, equivalent training, or professional experience.
• Hands-on experience with several of the following: security reviews, secure software development lifecycle practices, secure CI/CD, architecture reviews, threat modeling, vulnerability management, bug bounty programs, and responsible disclosure programs.
• Experience programming in at least one language and the ability to read and reason about code in Python, TypeScript, Go, or Rust.
• Familiarity with distributed cloud technologies such as AWS, GCP, Azure, Kubernetes, Docker, or Terraform.
• Understanding of cloud security, including cloud networking and IAM.
• Collaborative problem-solving skills and strong written and verbal communication.
• Ability to operate cross-functionally, build relationships, and influence through technical expertise.
• An ownership-oriented mindset and comfort working autonomously on a small, high-trust team.

Compensation and Benefits

The base salary range for this position is $162,000 to $420,000 CAD. Actual compensation depends on factors including work location, education, experience, skills, and job-related knowledge. The role is eligible for applicable employee benefit plans and programs, including incentive compensation, equity grants, paid time off, and group health insurance coverage. The compensation summary also states that the role offers equity and may include a bonus of up to 20%.

Equal Opportunity

Sentry is committed to providing equal employment opportunities regardless of legally protected characteristics and provides reasonable accommodations to employees and candidates with disabilities.