Lead application security assessments, including vulnerability scanning, code reviews, and threat modeling
Partner with product and development squads to drive remediation
Integrate and scale automated security tooling across CI/CD pipelines
Develop and maintain application security standards, patterns, and guardrails
Drive threat modeling and risk assessments for new features, APIs, and services
Collaborate with Cloud & Infrastructure Security to align security controls
Support incident response for application-level security events

Requirements

4–8+ years of experience in security engineering, application security, offensive security, or secure software development
Hands-on experience with security tools such as Semgrep, Burp Suite, Snyk, Trivy, or similar
Solid understanding of web, API, and mobile security vulnerabilities
Experience driving or participating in threat modeling and secure design reviews
Familiarity with cloud concepts and securing cloud workloads
Ability to independently identify, prioritize, and drive remediation on critical findings

Benefits

Unlimited time off
Flexible working
Comprehensive health, dental and vision plans
401(k) with a 4% company match
Equity option plan
Card for team testing
Health and wellness spending

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard skills

application securityvulnerability scanningcode reviewsthreat modelingrisk assessmentssecurity engineeringsecure software developmentweb security vulnerabilitiesAPI security vulnerabilitiesmobile security vulnerabilities

Soft skills

collaborationindependent identificationprioritizationremediation