Application Security Engineer

Role overview

Develop a practical application security program in partnership with security and engineering teams. The work focuses on integrating security into everyday development, improving the secure software lifecycle, and helping engineers identify and address risks early across a distributed organization.

Responsibilities

- Integrate static, dynamic, and dependency security checks into CI/CD workflows so vulnerabilities can be found before release. - Define and maintain developer-friendly secure development processes, threat modeling guidance, and security guardrails. - Operate a private bug bounty program, including report triage, budget tracking, program measures, and reducing time to mitigation. - Review Java and Python services through threat modeling and secure code assessments. - Deliver secure coding guidance and support a network of security champions across engineering. - Coordinate technical security communications, including educational material and vulnerability disclosures.

Requirements

- Three to five or more years of dedicated application security and/or full-stack development experience. - Practical experience assessing the security of Java and Python applications. - Familiarity integrating SAST and DAST tools into modern CI/CD systems; examples include GitHub Advanced Security, ZAP, Burp, Veracode, and Semgrep. - Hands-on experience running bug bounty programs and defining program metrics or KPIs. - Experience applying threat modeling approaches such as STRIDE to complex systems. - Strong communication skills and a track record of building productive relationships with engineering teams.

Nice to have

A bachelor’s degree, experience with AWS security controls, or background in cloud-native or fintech environments. Comfort working with globally distributed teams is useful.

Benefits and work setup

The role is remote-first, with hybrid office attendance for people living within 30 miles of an office. Listed benefits include equity, a 401(k) match for US employees, health and insurance options, flexible paid time off, parental leave, and professional development stipends. The listed salary range is $175,000–$230,000.