Application Product Security Engineer

Jump - Advisor AI

Application Security Engineer protecting sensitive financial data at fintech startup Jump. Partnering with engineering teams to ensure security in product design and implementation.

Posted 7/20/2026full-timeRemote • 🇺🇸 United StatesJuniorMid-Level💰 $130,000 - $170,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in application security, including threat modeling, secure design reviews, and vulnerability management. Proficient in coding and security tooling integration within CI/CD processes, with strong communication skills to collaborate effectively with engineering teams.

Highest-signal resume keywords

Application SecurityThreat ModelingIncident ResponseVulnerability ManagementSecure Coding Practices

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

PythonTypeScriptJavaScriptGoSASTDependency ScanningSecrets DetectionOWASP Top 10Code ReviewSecurity Vulnerability Prevention

Soft Skills

Strong CommunicationCollaborationTrust BuildingSelf-DirectionAdaptability

Tools & Technologies

CI/CDSecurity ToolingBug Bounty ReportsPenetration TestingVulnerability Scanning

Industry Keywords

Application SecurityProduct SecuritySecurity GuidanceSecurity ArchitectureSecurity Incident Management

Tech Stack

Tools & technologies

CloudGoJavaScriptPythonTypeScript

About the role

Key responsibilities & impact

Partner with product and engineering teams during design and planning to identify risks early and build security into new features from the start.
Lead threat modeling and secure design reviews for new products, features, and architecture changes.
Perform security-focused code reviews and help engineers fix vulnerabilities — and understand how to avoid them next time.
Build and maintain application security tooling (SAST, dependency scanning, secrets detection) integrated into CI/CD.
Participate in incident response: triage, investigate, contain, and drive post-incident learning.
Triage findings from bug bounty reports, pen tests, and vulnerability scans, and drive remediation with owning teams.
Develop lightweight security guidance, paved-road patterns, and training that make the secure way the easy way.
Wear multiple hats as needed — from customer security questionnaires to cloud and corporate security improvements.

Requirements

What you’ll need

2–4 years of experience in application security, product security, or a software engineering role with significant security responsibilities.
Solid grasp of common vulnerability classes (OWASP Top 10, authn/authz flaws, injection, SSRF) and how to prevent them in real codebases.
Experience with threat modeling and secure design review, and the ability to explain risk in terms engineers and PMs care about.
Hands-on incident response experience — you’ve helped detect, investigate, or contain real security events.
Ability to read and write code (e.g., Python, TypeScript/JavaScript, Go, or similar) well enough to review PRs and build small tools.
Strong communication and collaboration skills — you build trust with engineers rather than throwing findings over the wall.
Comfort with ambiguity and shifting priorities; you can self-direct and wear multiple hats.

Benefits

Comp & perks

health, dental, and vision coverage
flexible PTO
remote-first work environment