Sr. Software Engineer - Application Security

About Backblaze

Backblaze provides reliable, high-availability cloud storage trusted by consumers, SMBs, enterprises, and developers in over 150 countries. Backblaze B2 Cloud Storage supports data-intensive workloads including backup, media, analytics, and modern AI pipelines. Our teams focus on building secure, durable, scalable systems with a strong emphasis on application security from day one and protecting customers to keep them safe.

But while there is a lot to celebrate in our past, there is almost as much opportunity ahead of us.

About the Role

We are seeking an Application Security Engineer to improve application security across the software used to enable Backblaze B2 Cloud Storage and Computer Backup. The primary role is to build security into how the product is used, how data is stored and how customers can use it. This role will require development skills and application security knowledge to build security into the product and new features. Leveraging AI is key.

This is a hands-on role that requires application development knowledge. This role is expected to know and use the latest AI to help with both development and security. The primary requirements include; development in common web languages, application security and AI tool usage.

• Leverage AI tools and software for

• Building new and maintaining existing software security features

• Meeting evolving software security needs in existing software

• Developing new components as needed

• Perform security assessments and code reviews on internal and external customer-facing applications

• Work closely with engineers to remediate security vulnerabilities using AI tools

• Develop security automation and tooling to improve security

• Support bug bounty program and vulnerability handling

• Investigate newly reported vulnerabilities

• Determine ways to remediate them

• Provide guidance to engineering based on known vulnerabilities found in existing applications

• Understanding cryptography and secure authentication

• Knowledge of cloud environments and security they provide

• Support and develop on large software stack using

• Apache Tomcat running across a large number of servers

• JavaServer Pages (JSP) containing older features

• Node/JavaScript developed features and pages

• An architecture split among many different servers – supporting browsers and custom client software

• Strong security knowledge across large software stacks running on multiple servers

• Ability to reach out and learn about technologies or implementations as necessary

The Right Fit:

• Application Development and Security knowledge

• AI knowledge and experience using it for development & security

• Understanding of: AI Frameworks and tooling, core web security, common web security flaws, coding agents

• Strong understanding of OWASP Top 10 vulnerabilities

• Experience with security testing tools such as:

• SAST / DAST scanners

• Fuzzing tools

• Vulnerability scanners

• Familiar with web technologies: HTTP, REST APIs, etc.

• Experience with Web Applications, Cloud Systems and Linux Environments

• Determining how new and old security needs can leverage AI workflows and integrations to improve them

• AI Coding tools such as Gemini, Claude Code, ChatGPT, Cursor or others

• Experience with programming languages such as: Java, JSP, JavaScript, TypeScript, Go, Python and C/C++

Why Backblaze

• Build secure software used by companies worldwide

• Work at the intersection of AI, data, and cloud storage

• Collaborate with experienced engineering, security, product, and QA teams

• Competitive compensation and benefits

• Remote-first culture supporting work-life balance

At this point, we hope you're feeling excited about the job description you're reading. Even if you don't meet every requirement, we still encourage you to apply. Learning, developing, and growing are key parts of our culture. We're eager to meet people who believe in our mission an...