Sardine
Senior Application Security Engineer
$135K–$180K
United States · Remote · Senior · Full-time · Posted Oct 15, 2026
- Experience
- No specific number of years stated; the posting emphasizes judgment over tenure.
About the job
Finds and remediates application security weaknesses, automates vulnerability management, and establishes secure engineering patterns across Sardine’s services.
What you'll do
- Automate triage, validation, routing, and remediation of security findings; manage external pentests and the bug bounty program.
- Identify root causes, develop secure defaults and custom static analysis rules, and review platform-layer security controls.
- Test applications and APIs, review high-exposure code, threat-model designs, and support security enablement across engineering.
What they ask for
- End-to-end vulnerability management experience, including automation using code against scanner, ticketing, and source-control APIs.
- Software engineering background with code-auditing experience in at least one of Go, Python, Node.js, Ruby, or Java.
- Practical command of the OWASP Top 10, with depth in broken access control and business logic flaws.
- Experience with SAST, DAST, and SCA in CI/CD; cloud fundamentals on GCP or AWS; Docker and Kubernetes.
Nice to have
- Scaling security tooling; custom static analysis rules such as Semgrep or CodeQL.
- Fintech, payments, third-party security reviews, offensive security experience, advanced certifications, or public security work.
Pay
$135K – $180K USD base salary
Tools
Go, Node.js, Python, Ruby, Java, GCP, AWS, Docker
Model-written summary · the original posting is authoritative