← Back to jobs

Remote job

Full Stack Security Engineer (Application & Product)

Other Full-time Permanent United States

Job details

Not specified Salary
United States Eligibility
Lead Experience
Full-time Employment

About this role

Role overview

Improve the security of customer-facing applications, APIs, and internal services by working directly with software teams throughout development. This hands-on product security role combines architecture review and testing with writing fixes, automating security checks, and helping engineers build secure practices into everyday work.

Responsibilities

- Lead threat modeling, architecture assessments, and code reviews for web applications, APIs, and microservices. - Work alongside engineers to implement fixes for vulnerabilities in Python, Go, JavaScript, TypeScript, or comparable codebases. - Add and tune static, dynamic, and dependency security checks in CI/CD pipelines so issues are found earlier. - Configure application defenses such as web application firewalls, bot protection, and API gateways. - Provide secure coding guidance, training, and procedures to development teams. - Coordinate with operations on security framework requirements and help triage vulnerability reports.

Requirements

- Five or more years in application or product security, or software engineering with a substantial security focus. - Strong programming and code review skills in a modern language such as Python, Go, JavaScript, or TypeScript. - Deep understanding of common web vulnerabilities, REST or GraphQL API security, and authentication protocols such as OAuth, OIDC, and JWT. - Hands-on use of web security testing tools such as Burp Suite or ZAP. - Experience building or maintaining automated security checks in development pipelines. - Ability to turn complex security findings into clear, actionable engineering work.

Nice to have

- Application security certifications, experience protecting Kubernetes or Docker workloads, or involvement in bug bounty and coordinated disclosure programs. - Familiarity with SOC 2, ISO 27001, or GDPR requirements.

Benefits and work setup

The position is remote-first. Listed compensation is $152,000–$220,000 base pay, with the final range depending on experience, qualifications, and location. Benefits include equity, medical, dental, and vision coverage, flexible paid time off, and a home office and equipment stipend. Employment visa sponsorship is not available.

Skills detected in the listing

TypeScriptJavaScriptPythonGoGDPRGraphQLDockerKubernetes
Detected Nov 13, 2026
Last verified Nov 13, 2026

Hidden Jobs Access

Unlock application links

Read the full job details for free. An active Hidden Jobs Access subscription is required to open the original application link.

Weekly

FREE $6.99/week after trial
  • Original application links
  • Full access to all MCP features
  • Cancel anytime

Monthly

$35.99 $17.99 /month
  • Original application links
  • Full access to all MCP features
  • 35% cheaper than weekly

Lifetime

$99.99 $49.99 /forever
  • Original application links
  • Full access to all MCP features
  • One-time payment
Hidden Jobs gives subscribers direct access to original application links
Offer ends in 00:00:00 Your profile-fit rate expires at midnight