Senior Application Security Engineer

Role overview

A senior application security engineer is needed to join a product security team with a focus on mobile application security across iOS and Android platforms. The role is highly hands-on and works closely with mobile, backend, and platform engineering teams to prevent, identify, and remediate vulnerabilities while still enabling fast delivery. The position owns security posture across the full application stack, including APIs, backend services, identity and authentication flows, and CI/CD pipelines.

Responsibilities

- Build and improve security tooling, automation, and guardrails for mobile and backend/API services - Conduct application and API/backend penetration testing on a regular cadence - Identify, triage, and help remediate vulnerabilities across consumer products - Partner with engineering and product teams to embed security into the development lifecycle for mobile, APIs, and backend services - Perform architecture and code reviews across the stack covering secure data storage, authentication, authorization, secure communication, and session/token handling - Use AI to accelerate security workflows such as code review, triage, and threat modeling, and help define production-grade AI security controls

Requirements

- 5+ years of experience in application security with strong hands-on work across mobile and backend systems - Direct experience securing iOS and Android applications in production environments - Solid understanding of mobile threat models and common attack techniques - Experience with static and dynamic mobile security testing techniques - Practical coding experience, preferably in Ruby, Go, or Python - Ability to clearly communicate security risks, tradeoffs, and remediation guidance to engineering partners

Benefits and work setup

- Base salary range of $213,000 to $295,000, plus bonus, equity, and benefits - Hybrid schedule with four days in office and Fridays from home for those near a primary office, with a fully remote option available - Comprehensive health, financial, and wellbeing benefits, including backup child, elder, and pet care - Subsidized commuter benefits for eligible employees - Generous vacation policy plus company-wide paid days off - Paid volunteer time (1% of time off) to support local community organizations - Annual wellness stipend - Up to 22 weeks of paid parental leave for birthing parents and 12 weeks for non-birthing parents, plus family planning reimbursement