Application Security Engineer at SonarSource in Geneva

Keywords

• Application Security
• AWS
• Threat Modeling
• Penetration Testing
• AI Security

Summary

Join SonarSource in Geneva to champion security by design for AI-driven software. You will safeguard cloud platforms and products while strengthening customer trust through rigorous assessments and threat modeling.

Job Description

SonarSource is a leader in AI code review and verification, helping global enterprises ensure that software generated by AI agents is reliable and secure. As an Application Security Engineer in Geneva, you will join the Information Security team to protect our products and cloud platforms. Your mission is to earn deep trust with our customer base by demonstrating that Sonar meets demanding industry standards while integrating security into every stage of the development cycle.

• Partner with product and engineering teams from the earliest design stages to build secure and resilient solutions by design.
• Review product architectures and AWS environments to ensure security requirements inform technical decisions.
• Plan and manage independent security assessments, penetration tests, and red-team exercises, translating findings into practical improvements.
• Investigate complex security findings, identify root causes, and support teams in implementing durable remediation.
• Lead the investigation of customer security concerns with rigor and empathy to reinforce confidence in our security program.
• Monitor threat intelligence to prioritize risks and continuously improve security processes through automation.

• Extensive experience with application and cloud architectures, predominantly on AWS.
• Proven track record in conducting application security assessments, including code review and evaluation of authentication designs.
• Experience assessing and securing AI and agentic AI capabilities, with a curiosity to define emerging best practices.
• Familiarity with threat-modeling approaches such as STRIDE to identify risks early in design discussions.
• Experience with penetration testing, red-team engagements, and bug-bounty programs with an attacker mindset.
• Practical experience using AI to automate repeatable security work and build small tools for efficiency.

This role is based in Geneva, Switzerland. We are willing to relocate the right candidate who is committed to working in Geneva. SonarSource values diversity, equity, and inclusion, fostering a global environment where different perspectives are respected and everyone is empowered to contribute their best.