PIMCO
Sr. Software Engineer - Application Security
Full details on LinkedIn
The complete job description, requirements, and application details are available on the original posting.
About PIMCO
Pacific Investment Management Company LLC (PIMCO) is a prominent global investment management firm based in Newport Beach, California, founded in 1971. As an indirect subsidiary of Allianz SE, PIMCO ranks as the 6th-largest asset manager worldwide, overseeing $2.20 trillion in total assets, including $1.78 trillion in third-party client assets. The firm operates 24 offices globally and employs over 3,100 professionals. PIMCO offers a wide range of investment management services, specializing in fixed income management while also providing portfolio management, equities management, exchange-traded funds (ETFs), and various types of funds and investment trusts. The firm is recognized as the largest active ETF manager and has a strong focus on research and trading services. PIMCO serves a diverse clientele, including central banks, pension funds, corporations, and individual investors, adapting to various market conditions. The company is also committed to community engagement through initiatives aimed at addressing issues like hunger and gender equality.
Security at PIMCO
Compiled from public job postings, careers pages, and company materials. Data may not reflect current state — verify during interviews.
Security Philosophy
- PIMCO's AppSec philosophy emphasizes developer enablement, aiming for security to be an enabler, not a blocker, for innovation.
- They focus on making application security practical and developer-friendly.
- Their approach includes risk-based prioritization to define and drive remediation strategies, with a strong emphasis on tool categories such as SCA, Secrets Scanning, SAST, and DAST.
Security Team
PIMCO's public leadership includes Dirk Manelski as Chief Technology Officer. The company lists Technology roles on its careers site, emphasizing platform development and complex analytical methods for large datasets. A LinkedIn search for AppSec-related profiles returned one matching profile. As of, there is at least one active Staff Application Security Engineer job posting. Information regarding team size, exact AppSec reporting lines, and organizational model (centralized vs. embedded) is not publicly available.
Key Initiatives
PIMCO's AppSec initiatives include vulnerability management, utilizing tools to track, prioritize, and close gaps efficiently, with a specific mention of ArmorCode. They aim to 'shift-left' by embedding security into applications and CI/CD pipelines. Developer enablement activities include leading Tech Talks, publishing Wikis, and sharing code examples. Information on a Security Champions program, intake sources (bug bounty, third-party pen-tests, scanner inventory), triage SLAs, MTTR, ticketing workflows, and recent initiatives beyond active hiring is not publicly available.
Preparing for an AppSec interview?
Get the weekly briefing 2,000+ security pros trust.