Security Engineer Application Security

Skills

About the Role

You will embed security into product development, conduct threat modeling and security assessments, build automated application-security controls, review code, secure AI data and model environments, and help teams remediate vulnerabilities.

Requirements

• 4+ years of hands-on application security engineering experience
• Understanding of developer workflows and developer experience
• Expertise in at least two of Python, Java, Go, JavaScript, or TypeScript
• Knowledge of SAST, DAST, vulnerability management, security testing frameworks, and DevSecOps
• Ability to read and review code across multiple languages
• Excellent communication skills
• Experience reducing risk through automation and scalable security practices

Responsibilities

• Conduct threat modeling and design secure architectures
• Build and evolve the application security program
• Establish and maintain SAST and DAST scanning in CI/CD pipelines
• Conduct security code reviews and build vulnerability-detection automation
• Create secure coding standards, reusable patterns, and libraries
• Lead security assessments and penetration testing
• Design security controls for data pipelines, model training environments, and AI agents
• Research AI and LLM attack vectors and build defenses

Benefits

• Generous PTO and company holidays
• Medical, dental, and vision coverage
• 16 weeks of paid parental leave
• Fertility and family planning support
• Early-detection cancer testing
• Flexible spending account options
• Health savings account with company contribution for eligible plans
• Wellness stipend
• Learning and development stipend
• Company-wide and team off-sites
• Company stock options
• 401k