Sr. Software Engineer - Application Security

About Backblaze

Backblaze provides reliable, high-availability cloud storage trusted by consumers, SMBs, enterprises, and developers in over 150 countries. Backblaze B2 Cloud Storage supports data-intensive workloads including backup, media, analytics, and modern AI pipelines. Our teams focus on building secure, durable, scalable systems with a strong emphasis on application security from day one and protecting customers to keep them safe.

But while there is a lot to celebrate in our past, there is almost as much opportunity ahead of us.

About the Role

We are seeking an Application Security Engineer to improve application security across the software used to enable Backblaze B2 Cloud Storage and Computer Backup. The primary role is to build security into how the product is used, how data is stored and how customers can use it. This role will require development skills and application security knowledge to build security into the product and new features. Leveraging AI is key.

This is a hands-on role that requires application development knowledge. This role is expected to know and use the latest AI to help with both development and security. The primary requirements include; development in common web languages, application security and AI tool usage.

• Leverage AI tools and software for
• Building new and maintaining existing software security features
• Meeting evolving software security needs in existing software
• Developing new components as needed
• Perform security assessments and code reviews on internal and external customer-facing applications
• Work closely with engineers to remediate security vulnerabilities using AI tools
• Develop security automation and tooling to improve security
• Support bug bounty program and vulnerability handling
• Investigate newly reported vulnerabilities
• Determine ways to remediate them
• Provide guidance to engineering based on known vulnerabilities found in existing applications
• Understanding cryptography and secure authentication
• Knowledge of cloud environments and security they provide
• Support and develop on large software stack using
• Apache Tomcat running across a large number of servers
• JavaServer Pages (JSP) containing older features
• Node/JavaScript developed features and pages
• An architecture split among many different servers – supporting browsers and custom client software
• Strong security knowledge across large software stacks running on multiple servers
• Ability to reach out and learn about technologies or implementations as necessary

The Right Fit:

• Application Development and Security knowledge
• AI knowledge and experience using it for development & security
• Understanding of: AI Frameworks and tooling, core web security, common web security flaws, coding agents