Senior Application Security Engineer

Who you are

• Experience - 4+ years of experience working as an Application/Product Security Engineer:
• Extensive experience with security assessments, security design reviews, or threat modeling
• Hands-on secure code review (Java/Spring or similar)
• Experience operating SAST/DAST/SCA and secrets-scanning tooling in a CI/CD pipeline
• Strong ability to work independently
• Education - A B.A. / B.S. degree in relevant fields such as Computer Science or Computer Engineering or Information Security or relevant experience
• Technical aptitude - You’re technologically savvy and can easily get up to speed on modern tech stacks (i.e., Java, Spring, Terraform, Kubernetes, etc.)
• Ownership - The pride you put into every aspect of your work is unparalleled and undeniable
• Superb communication - Intentional dialogue is a superpower. You listen as well as you share your perspective with others
• Resilience - We’re inspired by your unwavering determination to achieve success, no matter the adversity you face along the way
• Assurance - Your confidence is brilliant, yet ego-less. You possess a strong knowledge base, the ability to discover the unknown, and are open to differing perspectives
• Creative problem solving - Identifying the problem is simply not enough. You’re instinctually creative with your approach in finding solutions to roadblocks
• Experience working in regulated environments (fintech / financial services)
• Experience building AppSec automation or a “paved road” for developers
• Cloud (AWS) and API security experience
• Relevant certifications (e.g., CSSLP, GWAPT, OSCP)

What the job involves

• Altruist is in the midst of an exciting phase and we’re excited to hire a Senior Application Security Engineer to join our growing Security team. Your expertise will ensure our products are secure — from design and code through the CI/CD pipeline
• Educate and train development teams on secure coding practices and emerging security threats
• Perform technical security assessments and code reviews across our Java/Spring services
• Engage in threat modeling to anticipate potential security threats and develop strategies to mitigate them
• Assist teams in building libraries, repeatable patterns, and paved-road components that ensure security is a part of every new feature
• Own and tune SAST, DAST, software composition analysis (SCA), and security tooling in CI/CD pipelines; triage findings and drive them to remediation with clear prioritization
• Partner with engineering to close service-to-service authentication/authorization gaps and other systemic issues
• Work with Detection & Response and our offensive security engineers to turn findings into durable detections and prevention
• Contribute to our secure SDLC standards and developer security guardrails

Benefits

• Grow your career: Altruist is a thoughtful, fast-growing company that values high achievers
• Our success is your success: Be rewarded for doing great work - competitive compensation and equity for all team members
• Take care of yourself: Health, dental, and vision coverage, available on your first day
• Work-life integration: We work hard and respect everyone’s whole selves
• You're welcome here: Altruist is proud to be an equal opportunity employer. We’re committed to inclusivity