Security Engineer, Application Security
WRITERVisit WRITER website
WRITER is an enterprise AI platform for agentic work, aimed at marketing and revenue teams.
San Francisco, United States
Funding history
About WRITER
WRITER provides AI agents, proprietary Palmyra models, enterprise context and governance tooling to create and execute enterprise workflows.
Skills
Candidate Availability
Required and preferred rules are kept separate and reflect the wording in the original posting.
About the Role
You'll build security into the AI platform through threat modeling, secure architecture design and security code reviews. You'll own the application security program including SAST/DAST in CI/CD, create secure coding standards and libraries, lead penetration testing of applications, AI services and APIs, and research LLM-specific attack vectors.
Requirements
- 4+ years in application security engineering
- Understanding of developer workflows
- Proficiency in at least two languages (Python, Java, Go, JavaScript/TypeScript)
- Knowledge of SAST/DAST, vulnerability management and DevSecOps
- Excellent communication skills
- Builder's mindset
Responsibilities
- Conduct threat modeling and design secure architectures
- Own the application security program including SAST/DAST in CI/CD
- Conduct security code reviews
- Establish secure coding standards and reusable security libraries
- Design security features and products for customers
- Integrate AI agents to increase security team velocity
- Lead security assessments and penetration testing
- Design controls for data pipelines, model training environments and AI agents
- Research LLM and generative AI attack vectors
Benefits
- Generous PTO plus company holidays
- Comprehensive medical and dental insurance
- Paid parental leave (16 weeks)
- Fertility and family planning support
- Pension scheme with company contribution
- Wellness stipend
- Learning and development stipend
- Company and team off-sites
- Company stock options
