Dropbox Verified

Cloud Computing, Software, Productivity, SaaS

Application Security Engineer

Name: RiseMe
Availability: InStock

MexicoHybridFull TimePosted 2 days ago

Is this role right for you?

Upload your resume and get a skill-by-skill breakdown — see exactly where you match, where you're close, and what to highlight. Not a mystery percentage.

Get a tailored resume highlighting what this role needs.

Required skills

application security
security engineering
security infrastructure
automation
tooling
secure-by-default
secure products
security tooling
custom security rules
vulnerability patterns

Nice to have

developer workflows
machine learning systems
generative AI
AI-driven products
internal libraries
frameworks

Role summary

The Product Security Engineering team is seeking an Application Security Engineer to focus on reducing risk at scale by building security infrastructure, automation, and tooling. This role involves working closely with engineering and product teams throughout the SDLC to embed secure practices and deliver scalable solutions. Responsibilities include implementing security tooling, writing custom security rules, building frameworks to address vulnerabilities, performing threat modeling, and supporting secure development in emerging tech areas like AI. The role requires 4+ years of experience in application security or security engineering, hands-on experience with security automation, and a solid understanding of common vulnerability classes. Familiarity with modern tech stacks, CI/CD, and cloud-native environments is expected. Experience with incident response or security on-call rotations is a plus.

Role Description

As part of the Product Security Engineering team, you’ll focus on reducing risk at scale by building the security infrastructure, automation, and tooling that empowers engineers to ship secure products with confidence. We work closely with engineering and product teams throughout the software development lifecycle (SDLC), embedding secure-by-default practices and delivering scalable solutions.

Product Security Engineers create impact by implementing security tooling, writing custom security rules, and building frameworks that address broad classes of vulnerabilities. In addition to proactive development, we support teams through threat modeling, documentation, and education to uplift security culture across Dropbox.

Our Engineering Career Framework is viewable by anyone outside the company and describes what’s expected for our engineers at each of our career levels. Check out our blog post on this topic and more here.

Responsibilities

Build and maintain security tools, automation, and libraries to enable secure-by-default development across engineering teams.

Design and implement custom security rules (e.g., Semgrep, CodeQL) to detect and prevent common and emerging vulnerability patterns.

Act as a subject matter expert on application security across web, mobile, and desktop environments.

Improve and scale the Secure Development Lifecycle (SDLC) by integrating tools, checks, and processes into engineering workflows.

Perform targeted code reviews, and develop follow-up tooling or controls to prevent regressions.

Collaborate cross-functionally with engineering, product, GRC, and AI/ML teams to proactively address security risks, especially in fast-moving and emerging tech areas.

Many teams at Dropbox run Services with on-call rotations, which entails being available for calls during both core and non-core business hours. If a team has an on-call rotation, all engineers on the team are expected to participate in the rotation as part of their employment. Applicants are encouraged to ask for more details of the rotations to which the applicant is applying.

Requirements

4+ years of experience in application security or security engineering roles.

Hands-on experience building or using security automation tools to improve developer workflows and product security.

Demonstrated ability to work across the SDLC, including supporting and interpreting findings from penetration tests and bug bounty reports.

Familiarity with modern tech stacks, including microservices, CI/CD pipelines, and cloud-native environments.

Solid understanding of common vulnerability classes (e.g., injection, XSS, authN/authZ issues) and practical mitigation strategies.

Comfortable working in cross-functional environments and supporting multiple product and engineering teams simultaneously.

Experience participating in or supporting incident response or security on-call rotations is a plus

Preferred Qualifications

Experience in application security engineering, with a strong focus on security tooling and automation.

Demonstrated ability to write and maintain custom security rules and integrate them into developer workflows.

Experience with machine learning systems, particularly generative AI, and the ability to support secure development in AI-driven products.

Experience developing internal libraries or frameworks that reduce or eliminate entire classes of vulnerabilities.

Proficient in software development, with experience contributing production-level code in one or more modern languages.

Familiarity with securing diverse application types, including web, mobile, and native platforms.

Experience with data security, including tooling for data protection, access control, and encryption.

Strong communication skills and ability to build trusted partnerships with cross-functional teams.

Durable Skills

AI fluency means using these tools to amplify human judgment, not replace it. We believe people with these skills will thrive as work and technology continue to evolve:

Awareness: Understand yourself and others.

Judgment: Evaluate information and make decisions in complex situations.

Adaptability: Learn, adjust, and stay effective through change.

Connection: Communicate, collaborate, and build trust.

To learn more about why these skills matter and what the data shows about thriving through change, read this blog post from our Chief People Officer, Melanie Rosenwasser.

Compensation

Sample Dropbox interview questions

1
Diameter of a Binary Tree Find the diameter of a binary tree. Input: root = [1,2] Output: 1 Explanation: The longest path is simply the single edge connecting the root node to its only child.
codingmedium
2
Buildings with an Ocean View Find all buildings that have an ocean view. Input: heights = [1,2,3,4] Output: [3] Explanation: Since the ocean is to the right, only the rightmost tallest building (index 3) is not blocked by any others.
codingmedium
3
Pacific and Atlantic Water Flow Calculate water flow from a matrix to the Pacific and Atlantic oceans. Input: heights = [[2,1],[1,2]] Output: [[0,0],[0,1],[1,0],[1,1]] Explanation: All cells can flow to both oceans because water can move to adjacent cells of equal or lower height or directly off the edges.
codingmedium
4
Encode and Decode Strings Encode a list of strings into a single string and decode it back. Input: strs = ["","hello",""] Output: ["","hello",""] Explanation: Prepends chunk lengths and a delimiter (e.g., "0#5#hello0#") to safely encode and perfectly restore empty strings.
codingmedium
5
Palindromes in Base-10 and Base-k Return the first n integers that are palindromes in both base-10 and base-k. Input: n = 2, k = 4 Output: [1, 5] Explanation: 1 is '1' in base 4, and 5 is '11' in base 4. Both are perfect palindromes in decimal and base 4 simultaneously.
codingmedium

Get started to unlock a personalized interview prep pack for this role.

Ready to apply?

You'll be redirected to Dropbox's application page.