Senior Application Security Engineer

• Act as the initial security point of contact for engineering and product teams.
• Conduct security-focused architectural reviews and threat modeling.
• Work with development teams to identify and fix security issues.
• Contribute to the development of security policies and standards.
• Create secure coding guidelines and build automated tools to prevent security issues.
• Collaborate with development teams to embed security in CI/CD pipelines.
• Own the end-to-end vulnerability management program.
• Deploy scanning tools and triage security vulnerabilities.
• Evaluate new security vendors and run vendor evaluations.

• 5+ years of experience in application or product security roles, preferably in high-growth, cloud-native environments.
• Strong ability to collaborate effectively with software development teams.
• Experience performing architecture reviews/threat models for custom software.
• Excellent communication skills, both written and verbal.
• Familiarity with common security libraries and tools, such as static analysis and penetration testing tools.
• Understanding of common security vulnerabilities and mitigation strategies (e.g., OWASP Top 10).
• Basic development or scripting skills.
• Fundamental knowledge of network and web protocols (e.g., TCP/IP, HTTP, HTTPS).
• Willingness to participate in on-call rotations.
• Proactive approach to managing projects with a focus on outcomes.

Pay range: $180K - $230K

• Flexible PTO
• Competitive health & dental insurance options
• Fertility and adoption benefits via Carrot
• Generous, fully-paid parental leave policy
• 401k benefit - eligible to contribute from day 1
• Professional development stipend for educational expenses
• Pre-tax commuter benefits
• Dependent Care FSA
• Home office support
• Team bonding opportunities