Senior Application Security Engineer

Overview In this role you will advance Unity’s security across the engine, editor, cloud services, and AI-enabled developments. You will lead threat modeling, secure design reviews, code evaluation, and vulnerability management, using AI-assisted tooling to scale security across large, complex systems. You’ll protect Unity’s AI and agentic workflows, collaborating with global engineering teams to implement guardrails and secure defaults. This role combines hands-on security work with shaping Unity’s secure development lifecycle and compliance efforts. Compensation / BenefitsComprehensive health, life, and disability insuranceCommute subsidyEmployee stock ownershipCompetitive retirement/pension plansGenerous vacation and personal daysParental leave and family-care programs ResponsibilitiesLead threat modeling, secure design reviews, and penetration testing for Unity products and services across engine, editor, cloud services, APIs, and internal platformsPerform deep code review and manual testing on high-risk systems using AI-assisted processes to complement automated toolingBuild and operate security automation and extend AI-assisted tooling for continuous code review, triage, and automated penetration testingSecure Unity’s AI and agentic systems, evaluating risks in AI-native products, LLM integrations, and agent workflowsPartner with engineering teams to drive remediation, turning findings into guardrails and secure defaultsInvestigate and respond to application security incidents and conduct root cause analysisContribute to the secure development lifecycle and compliance efforts Key requirementsExperience in application security with a track record on large-scale systemsStrong command of secure coding and vulnerability classes (OWASP Top 10 and beyond)Hands-on secure development across several languagesPractical penetration testing, security assessment, and vulnerability management with standard toolingExperience with Cloud security (GCP, AWS, or Azure)Working knowledge of secure architecture patternsClear technical communication for engineers and non-technical partners across regionsClear technical communicationCross-regional collaborationProblem-solving mindsetApplication securityThreat modelingSecure design reviews