Ironclad
Staff Application Security Engineer
$170K–$190K
San Francisco · Hybrid · Staff · Full-time · Posted Jun 17, 2026
- Experience
- 3+ years in application security or software development; SaaS or regulated-field experience preferred.
About the job
Strengthens Ironclad’s application security program by assessing software risks, improving security practices and processes, and helping engineering teams protect sensitive data.
What you'll do
- Conduct application security assessments, vulnerability testing, code reviews, and threat modeling.
- Develop secure coding practices and integrate security reviews into the CI/CD pipeline; collaborate on vulnerability remediation and compliance.
- Provide security expertise, training, technical leadership, and mentorship across engineering and security teams.
What they ask for
- Proficiency in TypeScript or JavaScript.
- In-depth knowledge of application security, including OWASP Top 10 and SANS Top 25.
- Experience with security testing tools such as Burp Suite, AppScan, and Nessus.
- Experience operating in a cloud provider and collaborating with cross-functional teams.
Nice to have
- AI penetration testing.
- Experience with microservices or containers, security frameworks, observability platforms, or SAST/SCA tools.
Pay
$170,000 - $190,000 USD base salary
Tools
TypeScript, Javascript, Burp Suite, AppScan, Nessus, AWS, GCP, Azure
AI focus
AI penetration testing is a nice-to-have; the posting also describes Ironclad’s broader work building agentic solutions, but does not specify AI development duties for this role.
Model-written summary · the original posting is authoritative