Senior Application Security Engineer
AI risk platform that helps financial institutions prevent fraud, ensure compliance, and detect money laundering through behavioral analysis and device intelligence.
Funding history
Projects
About Sardine
Sardine helps financial institutions prevent fraud and ensure compliance by analyzing user behavior and device intelligence in real-time. Users can detect identity theft, payment fraud, account takeovers, and money laundering while streamlining KYC/AML processes. Sardine provides risk management with AI agents, case management, and regulatory reporting tools.
Skills
Candidate Availability
Required and preferred rules are kept separate and reflect the wording in the original posting.
About the Role
You will run and automate the vulnerability-management pipeline, validate and drive remediation of findings, and eliminate recurring root causes through secure defaults and custom analysis rules. You will test applications and APIs, review high-exposure code, perform threat modeling, and enable secure engineering practices.
Requirements
- Experience running end-to-end vulnerability management and automating it with scanner, ticketing, and source-control APIs
- Software engineering background with experience shipping and maintaining software
- Code-auditing experience in at least one of Go, Python, Node.js, Ruby, or Java
- Knowledge of OWASP Top 10, broken access control, and business logic flaws
- Experience using SAST, DAST, and SCA in CI/CD
- Cloud fundamentals on GCP or AWS
- Docker and Kubernetes knowledge
Responsibilities
- Triage, validate, route, and drive remediation of findings from SAST, DAST, SCA, code review, pentests, and bug bounty reports
- Build automation to reduce manual effort in vulnerability-management workflows
- Set scopes for external pentests and bug bounty programs, direct testers, judge severity, and close findings
- Identify recurring finding patterns and remove root causes
- Define secure patterns and defaults
- Write custom static-analysis rules for internal anti-patterns
- Review authorization, service identity, secrets handling, and gateway controls
- Work with engineers to implement durable security fixes
- Perform hands-on application and API testing and manual code review
- Conduct threat modeling for new and high-exposure designs
- Support security enablement, including a security champions program
Benefits
- Equity
- Early exercise for options, including pre-vested options
- Remote-first work arrangement
- Flexible paid time off
- Year-end break
- Health, dental, and vision coverage for employees and dependents
- 4% 401k or RRSP matching
- MacBook Pro
- One-time home-office setup stipend
- Monthly meal stipend
- Monthly social meet-up stipend
- Annual health and wellness stipend
- Annual learning stipend