Staff Application Security Engineer

Role overview Establish the hands-on application security engineering practice for a high-volume device intelligence platform. As a founding senior engineer in the function, you will turn security strategy into secure development workflows, practical tooling, vulnerability remediation, and guidance engineers can apply across APIs, software development kits, dashboards, and data systems.

Responsibilities - Build a secure development lifecycle that incorporates design-time threat modeling, code review, and pre-release security testing into existing engineering workflows. - Operate and tune code, dependency, secrets, container, and infrastructure scanning tools in CI/CD, with clear finding ownership and remediation targets. - Develop secure defaults, reusable libraries, and automation for common needs such as access control, input validation, secrets handling, and cryptography. - Conduct architecture reviews and hands-on testing for authentication, authorization, injection, server-side request forgery, business logic, and abuse risks. - Manage vulnerability triage and remediation from scanners, penetration tests, bug bounty reports, and customer findings. - Lead technical investigation and response for application-layer security incidents, and help engineers strengthen security through reviews and design feedback.

Requirements - At least eight years in software or security engineering, including five or more years focused on application security in product development. - Strong software engineering skills and ability to contribute production-quality code in a language such as TypeScript, JavaScript, Go, or Python. - Practical knowledge of web and API security, including common vulnerability classes and secure design. - Experience leading threat models and security reviews for complex systems. - Experience deploying and tuning security testing tools within CI/CD pipelines. - Practical experience with AI-assisted security analysis, triage, or remediation, including judgment about appropriate levels of automation.

Benefits and work setup - Remote role open across the United States, with location-based pay ranges: $177,000–$240,000 overall, including $209,000–$240,000 in New York City and $177,000–$204,000 in Chicago. - Remote-first work, with medical, dental, vision, and retirement benefits, plus wellness and professional development support.