Brex
Staff Application Security Engineer
$240K–$300K
United States +1 · Remote · Staff · Full-time · Posted Jun 25, 2026
- Location
- United States
Remote - Experience
- 8+ years; accepted fields include Application Security, Product Security, or software engineering focused on offensive and defensive application security.
About the job
Leads application security strategy and engineering, securing Brex’s products, infrastructure, and AI/ML and agentic workflows through secure design, vulnerability discovery, and cross-functional remediation.
What you'll do
- Set the Application Security team’s technical vision and establish secure standards and defaults across engineering.
- Secure AI/ML and agentic workflows and lead vulnerability discovery and offensive security testing.
- Partner with engineering teams on secure primitives, APIs, and microservices; mentor engineers and drive remediation.
What they ask for
- 8+ years in Application Security, Product Security, or software engineering focused on offensive and defensive application security.
- Technical leadership and mentorship on complex, multi-quarter security engineering initiatives.
- Hands-on AI security expertise, including agentic architectures, LLM gateways, and adversarial AI vectors.
- Experience with secure development lifecycles, threat modeling, cloud-native container security (AWS, Kubernetes), and proficiency in Python, Go, or similar languages.
Nice to have
- Experience with Kotlin, gRPC, GraphQL, Kubernetes, or building and scaling security teams.
- Cloud/distributed-systems security experience, security community contributions, bug bounty participation, or published AI security research.
Pay
$240,000 USD - $300,000 USD (base salary)
Tools
AWS, Kubernetes, Python, Go, Kotlin, gRPC, GraphQL
AI focus
Architect and secure AI/ML and agentic workflows, including mitigating prompt injection, model manipulation, and data poisoning; secure agentic architectures and LLM gateways and evaluate adversarial AI vectors.
Model-written summary · the original posting is authoritative