Sr. Software Engineer - Application Security

About Backblaze

Backblaze provides reliable, high-availability cloud storage trusted by consumers, SMBs, enterprises, and developers in over 150 countries. Backblaze B2 Cloud Storage supports data-intensive workloads including backup, media, analytics, and modern AI pipelines. Our teams focus on building secure, durable, scalable systems with a strong emphasis on application security from day one and protecting customers to keep them safe.

But while there is a lot to celebrate in our past, there is almost as much opportunity ahead of us.

About the Role

We are seeking an Application Security Engineer to improve application security across the software used to enable Backblaze B2 Cloud Storage and Computer Backup. The primary role is to build security into how the product is used, how data is stored and how customers can use it. This role will require development skills and application security knowledge to build security into the product and new features. Leveraging AI is key.

This is a hands-on role that requires application development knowledge. This role is expected to know and use the latest AI to help with both development and security. The primary requirements include; development in common web languages, application security and AI tool usage.

Leverage AI tools and software for

Building new and maintaining existing software security features

Meeting evolving software security needs in existing software

Developing new components as needed

Perform security assessments and code reviews on internal and external customer-facing applications

Work closely with engineers to remediate security vulnerabilities using AI tools

Develop security automation and tooling to improve security

Support bug bounty program and vulnerability handling

Investigate newly reported vulnerabilities

Determine ways to remediate them

Provide guidance to engineering based on known vulnerabilities found in existing applications

Understanding cryptography and secure authentication

Knowledge of cloud environments and security they provide

Support and develop on large software stack using

Apache Tomcat running across a large number of servers

JavaServer Pages (JSP) containing older features

Node/JavaScript developed features and pages

An architecture split among many different servers – supporting browsers and custom client software

Strong security knowledge across large software stacks running on multiple servers

Ability to reach out and learn about technologies or implementations as necessary

The Right Fit:

Application Development and Security knowledge

AI knowledge and experience using it for development & security

Understanding of: AI Frameworks and tooling, core web security, common web security flaws, coding agents

Strong understanding of OWASP Top 10 vulnerabilities

Experience with security testing tools such as:

SAST / DAST scanners

Fuzzing tools

Vulnerability scanners

Familiar with web technologies: HTTP, REST APIs, etc.

Experience with Web Applications, Cloud Systems and Linux Environments

Determining how new and old security needs can leverage AI workflows and integrations to improve them

AI Coding tools such as Gemini, Claude Code, ChatGPT, Cursor or others

Experience with programming languages such as: Java, JSP, JavaScript, TypeScript, Go, Python and C/C++

Why Backblaze

Build secure software used by companies worldwide

Work at the intersection of AI, data, and cloud storage

Collaborate with experienced engineering, security, product, and QA teams

Competitive compensation and benefits

Remote-first culture supporting work-life balance

At this point, we hope you're feeling excited about the job description you're reading. Even if you don't meet every requirement, we still encourage you to apply. Learning, developing, and growing are key parts of our culture. We're eager to meet people who believe in our mission and can contribute to our team in various ways. We want people to feel comfortable expressing their true selves and to come, stay, and do their best work here.

To understand more about the data we collect and process as part of your application, please view our Backblaze Employee Privacy Notice.

#LATAM