Senior Application Security Engineer

What you'll do

• Conduct application security reviews, threat modeling, code analysis, and offensive testing; guide or implement durable vulnerability fixes.
• Improve AppSec tooling, vulnerability workflows, and automation, and track findings through remediation and verification.
• Enable engineering teams and partner across functions on secure design, AI security controls, and security processes.

What they ask for

• 5+ years of software engineering or application security experience, with hands-on AppSec depth in modern SaaS environments.
• Strong software development skills, including ability to read, write, and ship production code.
• Strong Linux and cloud fundamentals; deep familiarity with AppSec issues, secure design, vulnerability management, and developer security tooling.
• Experience with penetration testing, code review, findings through closure, AI-assisted process improvements, and securing AI-powered systems.

Nice to have

• Experience reviewing AI-native products, internal agents, or AI-assisted engineering workflows.
• Experience with secure-by-design practices, AppSec observability, developer enablement, or relevant security certifications.

Pay

$218,600 — $273,200 USD (total cash compensation, inclusive of annual base salary and annual bonus as applicable); $190,100 — $237,600 USD (total cash compensation, inclusive of annual base salary and annual bonus as applicable)

Tools

Ruby, Python, Linux, GCP, SAST

AI focus

Use AI to scale security and engineering processes, validate AI-assisted outputs, and build security checks and controls for AI-powered systems and features.