Staff Security Engineer, Application Security

Skills

About the Role

You will build security into an AI platform through threat modeling, secure architecture design, and automated controls. You'll own the application security program, lead penetration testing, create secure coding standards, and research LLM-specific threats.

Requirements

• Minimum 4 years of hands-on application security engineering experience securing large-scale production systems
• Understanding of developer workflows and experience
• Expertise in at least two programming languages (Python, Java, Go, JavaScript/TypeScript) and ability to review code
• Knowledge of SAST/DAST, vulnerability management, security testing frameworks, and DevSecOps
• Excellent communication skills for technical and non-technical audiences
• Builder's mindset focused on automation

Responsibilities

• Conduct threat modeling and design secure architectures with product teams
• Own the application security program including SAST/DAST scanning in CI/CD and security code reviews
• Establish secure coding standards and reusable security patterns and libraries
• Design security features and products that help secure customer environments
• Leverage AI agents to increase security team velocity
• Lead security assessments and penetration testing of applications, AI services, and APIs
• Design security controls for data pipelines, model training environments, and customer-facing AI agents
• Research emerging AI/ML security threats and build defenses

Benefits

• Generous PTO plus company holidays
• Medical, dental, and vision coverage
• 16 weeks paid parental leave
• Fertility and family planning support
• Early-detection cancer testing through Galleri
• Flexible spending account and dependent FSA
• Health savings account with company contribution
• Wellness stipend
• Learning and development stipend
• Company-wide and team off-sites
• Stock options and 401k
• Equity