Application Security Engineer

Who you are

• 5 + years in Application / Product Security
• Hands-on experience securing web applications and automating AppSec workflows
• Familiarity with DevSecOps practices and container security & patching
• Experience with GitHub Actions, Python, TypeScript/JavaScript
• Clear, concise communicator who can translate risk for engineers
• Experience securing LLM workflows
• Experience with NIST Risk Management Framework
• Experience with software security at a U.S. defense contractor
• Active Security Clearance (or ability to obtain one) and willingness to travel onsite
• We encourage candidates from all backgrounds to apply, even if you don't feel like you're a perfect fit. If you're passionate about contributing to our mission, we'd love to hear from you!

What the job involves

• As an Application Security Engineer, you will help build security into our SaaS platform, ensuring we can quickly ship secure features to our customers
• You will partner with software, DevOps, and platform teams, while coordinating with audit partners, to embed threat modeling, automated SAST/SCA/DAST, and rapid vulnerability response into every stage of our SDLC
• Your work will be pivotal in protecting customer data, meeting compliance milestones, and scaling our security posture as the company grows
• Implement and deploy enterprise standard SAST, SCA, secrets-scan, DAST, and container/IaC checks in CI/CD
• Embed with development teams to run threat models, review critical PRs, and coach secure-by-default habits
• Drive a shift-left vulnerability detection program to identify and remediate vulnerabilities earlier in the software development lifecycle (SDLC)
• Coordinate with DevOps for application security issues that cross between application and infrastructure layers
• Support incident-response for product issues and feed lessons back into code, docs, and process

Benefits

• Health/Dental/Vision Insurance
• Equity + 401(k) Match
• Open PTO + all Federal Holidays and Dec 23-31
• Paid Parental Leave
• 100% Remote - Work From Anywhere in the US
• Flexible Work Environment - You Manage Your Work Day
• Quarterly Off-Site Travel for Team-Building