Note: The job is a remote job and is open to candidates in USA. Unity builds a real-time 3D platform powering games, interactive experiences, and solutions across multiple industries, while its Product Security team protects the platform and its users. The Senior Application Security Engineer will lead threat modeling, secure design reviews, penetration testing, code review, vulnerability management, and security automation, including securing Unity’s AI and agentic systems. The role partners with engineering teams across the US and EMEA to drive remediation, incident response, secure development, and compliance.
Responsibilities
- Lead threat modeling, secure design reviews, and penetration testing for Unity products and services, from the engine and editor to cloud services, APIs, and internal platforms
- Perform deep code review and manual testing on high-risk systems, using AI-assisted review processes and covering areas automated tooling cannot fully reach
- Build and operate security automation. Use and extend AI-assisted tooling for continuous code review, finding triage, and automated penetration testing, and step in where human judgment is required
- Secure Unity's AI and agentic systems. Assess AI-native products, LLM integrations, and agent workflows for the risks specific to them
- Partner with engineering teams to drive remediation, turning recurring findings into guardrails, secure defaults, and paved paths
- Investigate and respond to application security incidents, including root cause analysis and durable corrective action
- Contribute to Unity's secure development lifecycle and to compliance work
Skills
- Experience in application security, with a track record on complex, large-scale systems
- Strong command of secure coding and common vulnerability classes (OWASP Top 10 and beyond)
- Hands-on secure development experience across several languages
- Practical penetration testing, security assessment, and vulnerability management experience with standard tooling
- Experience with Cloud security (GCP, AWS, or Azure)
- Working knowledge of secure architecture patterns
- Clear technical communication for both engineers and non-technical partners across regions
- Experience in the technology, gaming or Ad tech industry
Benefits
- This role may be eligible for equity awards and participation in company incentive plans, such as annual discretionary bonuses or sales commissions.
- Comprehensive health, life, and disability insurance
- Commute subsidy
- Employee stock ownership
- Competitive retirement/pension plans
- Generous vacation and personal days
- Support for new parents through leave and family-care programs
- Office food snacks
- Mental Health and Wellbeing programs and support
- Employee Resource Groups
- Global Employee Assistance Program
- Training and development programs
- Volunteering and donation matching program
Company Overview
Company H1B Sponsorship