Senior Application Engineer [Remote-US]

Role overview Partner with web, backend, and data science teams to build application security into the software development lifecycle. The work spans product security, AI and machine learning risks, secure design, code review, vulnerability remediation, and developer enablement, with a focus on helping engineering teams address issues early and effectively.

Responsibilities - Advise product teams on security risks, including AI and machine learning considerations, and collaborate with teams beyond the immediate product portfolio. - Lead security design reviews and threat modeling for APIs, web features, and service integrations. - Integrate static, software composition, and dynamic analysis tools into CI/CD pipelines and developer workflows. - Review code and deployment configurations, prioritize findings with engineers, and validate remediation. - Build security automation and tooling, maintain application security guidance, and support security training and champions. - Assess SaaS integrations and open-source components, and contribute to incident response and remediation planning.

Requirements - Six to eight years in application security or full-stack development with substantial security experience. - Bachelor’s degree or equivalent relevant experience. - Secure coding knowledge in Python, JavaScript or TypeScript, Node.js, and web standards. - Familiarity with OWASP web and generative AI risks, API security, SSRF, and related vulnerabilities. - Experience with code scanning tools such as CodeQL, Wiz, SonarQube, or Snyk, and ability to navigate complex codebases. - Clear communication skills for guiding engineers across experience levels.

Nice to have GraphQL security, secure development lifecycle rollouts, security champion programs, open-source security contributions, infrastructure-as-code or container security, and experience applying AI or machine learning in security work.

Benefits and work setup Remote-first within the United States, excluding territories; occasional travel may be requested but is generally not required. Core collaboration hours are 9 a.m.–2 p.m. Pacific. Benefits include medical, dental, vision, life, and supplemental coverage, retirement matching, a monthly wellness allowance, and a one-time $2,000 home-office budget. Employees accrue four weeks of paid time off in their first year; new parents receive 12 weeks of paid leave. Up to $5,000 annually is available for professional development, with learning and coaching subscriptions. The listed salary range is $232,000–$379,000.