Senior Application Security Engineer

Mitek Systems

Technical authority on application security for Mitek, leading vulnerability remediation and secure development lifecycle. Collaborate with a development team on banking and financial software security.

Posted 7/23/2026full-timeRemote • California • 🇺🇸 United StatesSenior💰 $130,000 - $190,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in application security, including vulnerability remediation, secure coding practices, and threat modeling. Proficient in leading security initiatives, conducting penetration testing, and embedding security into the software development lifecycle.

Highest-signal resume keywords

Application Penetration TestingSAST, DAST, and SCA TuningThreat Modeling Using STRIDE or PASTAAPI Security Standards — OAuth 2.0, mTLSOWASP Top 10 Knowledge

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Application SecuritySecure Code ReviewVulnerability RemediationThreat ModelingPenetration TestingSecurity Gates in SDLCDeveloper Security TrainingAuthentication and Authorization Risk ReviewCryptographic Risk AssessmentSecurity Champions Program

Soft Skills

Collaboration with Development TeamsInfluencing Development PracticesCommunication of Security Findings

Tools & Technologies

SAST ToolsDAST ToolsSCA ToolsAPI Security ToolsSecure Coding Standards

Industry Keywords

Application SecuritySoftware Development LifecycleSecurity-Focused Software EngineeringSecurity-Sensitive ComponentsDeveloper Guidance

Tech Stack

Tools & technologies

SDLC

About the role

Key responsibilities & impact

Own the application vulnerability remediation program with prioritized developer guidance and clear SLAs
Work with development squads to explain findings, validate fixes, and confirm remediation
Drive systemic root-cause fixes rather than one-by-one patching; escalate unresolved criticals and highs
Define and own the SDLC — security gates and review checkpoints in sprint and release processes
Ensure SAST, DAST, and SCA tooling is configured, tuned, and producing actionable developer output
Embed security requirements into product planning and architecture decisions
Threat-model new features and architectural changes before code is written
Review designs for authentication, authorization, data-flow, and cryptographic risk
Produce written threat models that serve as developer guidance and audit evidence
Own API security standards — OAuth 2.0, mTLS, rate limiting, and abuse prevention
Conduct or coordinate manual secure code review of security-sensitive components
Lead application penetration-testing cycles — scoping, managing testers, validating findings
Build and run a Security Champions program across development squads
Deliver developer security training on OWASP Top 10 and secure-coding patterns
Create runbooks, coding standards, and pattern libraries developers can apply independently

Requirements

What you’ll need

Knowledge, skills and abilities typically gained through 5–8 years in application/product security or security-focused software engineering
Application penetration testing including business-logic and API testing
Hands-on SAST, DAST, and SCA tuning and operationalization
Secure code review across at least two web-application languages
Threat modeling using STRIDE, PASTA, or equivalent
Depth in OWASP Top 10 and API security risks; ability to influence development teams

Benefits

Comp & perks

Wellness: Universal, supplemental, and private healthcare plan choices based on country specifics
Financial future: retirement/pension plan contributions, MTK stock plan participation
Income protection: life event & disability coverage
Paid time off: generous annual leave, company holidays, volunteer time off
Learning: e-learning license, tuition reimbursement, hackathons
Home office setup allowance
Additional/optional benefits: pet insurance, identity theft protection, legal assistance