Staff Application Security Engineer

Role Overview NBCUniversal is seeking a Staff Cyber Systems Engineer to build and scale modern application security capabilities across the enterprise. This hands-on role within Software Security Services combines deep AppSec expertise, software engineering skills, cross-team thought leadership, and experience building automation, integrations, platforms, and developer-facing security capabilities. The role turns application security strategy into working solutions, including golden paths, remediation automation, secure AI guardrails, and integrated developer workflows. Although primarily focused on Application Security engineering, this role works closely with Cloud Security, Platform Engineering, and Software Engineering teams at NBCUniversal. Key Responsibilities Application Security Engineering Design, build, and improve application security capabilities that support secure software development across NBCUniversal. Build reusable security automations, integrations, APIs, workflows, and developer tools that reduce manual effort and improve scalability. Implement secure-by-default golden paths, paved roads, and engineering patterns that make secure development easier to adopt. Design and implement scalable security solutions spanning source code, open source dependencies, containers, cloud-native applications, CI/CD pipelines, infrastructure as code, developer platforms, and software supply chains. Partner with Cloud Security on capabilities spanning application code, containers, CI/CD, infrastructure as code, cloud platforms, and software supply chain workflows. Improve vulnerability prioritization, triage, remediation, validation, reporting, and speed to remediation. Secure AI and Agentic Workflow Enablement Build security patterns, guardrails, and reusable implementations that support safe use of AI-assisted development tools and coding assistants. Build capabilities that secure agentic workflows, AI-enabled developer tooling, and machine-assisted software delivery. Use automation and AI-enabled techniques to improve vulnerability triage, remediation planning, developer guidance, and workflow efficiency. Tooling, Automation, and Platform Integration Build integrations between application security platforms, GitHub, CI/CD systems, developer portals, ticketing systems, reporting platforms, and other engineering tools. Create telemetry, dashboards, and reporting pipelines for actionable visibility into application risk, coverage, and remediation progress. Technical Leadership and Enablement Serve as a senior technical expert for application security engineering, secure software development, software supply chain security, and secure AI development. Partner with architects, platform engineers, cloud security engineers, and development teams to turn security direction into working technical solutions. Mentor engineers and improve the team’s engineering practices, automation skills, and technical depth.