Senior Security Engineer, Product & Application Security

<h3>Who we are</h3> <p>The real world is the next frontier, and at Metropolis, we are creating the artificial intelligence to make it responsive. We are pioneering the Recognition Economy — a future where mundane repetition disappears and being known unlocks access, comfort and belonging everywhere you go. From transforming parking into a seamless drive-in, drive-out experience for millions of Members to expanding our intelligence layer across retail and hospitality, we are building a world that feels instinctive and magical. The future isn’t coming; it’s here, and we need builders, innovators and problem solvers to help us create it.</p> <h3>Who you are</h3> <p>Metropolis is seeking a highly technical, developer-oriented Senior Security Engineer to focus on securing our software engineering and product environments across web applications, mobile applications, APIs, AI/CV platforms, and cloud-native engineering systems. In this role, you will partner closely with AppDev, ATG, Corporate IT, Network Engineering, CCI, and Enterprise Systems to establish stronger application and product security maturity. You will play a key part in embedding security into engineering workflows, scaling security practices alongside our growing technology platforms, and collaborating directly with engineering teams on secure architecture and software security initiatives.</p> <h3>What you'll do</h3> <ul> <li>Perform application security reviews and threat modeling</li> <li>Lead secure SDLC and DevSecOps initiatives</li> <li>Enhance CI/CD and software supply chain security</li> <li>Secure web, mobile, and API environments</li> <li>Drive product security engineering projects</li> <li>Develop security tooling and automation</li> <li>Advance AI/CV and emerging AI security initiatives</li> <li>Manage security testing and vulnerability remediation</li> <li>Facilitate developer security enablement and education</li> <li>Provide secure architecture guidance and design reviews</li> </ul> <h3>What we're looking for</h3> <ul> <li>Bring strong application and product security experience</li> <li>Demonstrate experience with DevSecOps and secure SDLC practices</li> <li>Show experience securing cloud-native distributed systems</li> <li>Maintain a strong understanding of modern application architectures and APIs</li> <li>Utilize experience with CI/CD security tooling</li> <li>Possess a strong scripting and software engineering background</li> <li>Partner closely with engineering organizations</li> <li>Experience leveraging AI tools to transform static workflows into responsive, high-output processes</li> </ul> <h3>While not required, these are a plus:</h3>