Senior Application Security Engineer

Recurly

Application Security Engineer at Recurly managing vulnerabilities and enhancing product security through collaboration and AI solutions. Focused on implementing best practices for secure development and incident response.

Posted 6/16/2026full-timeBroomfield • Colorado • 🇺🇸 United StatesSeniorWebsite

Tech Stack

Tools & technologies

Google Cloud PlatformKubernetesTerraform

About the role

Key responsibilities & impact

Help prevent and mitigate vulnerabilities by collaborating with the rest of the organization and contributing product security enhancements
Represent the organization to external security researchers via our Bug Bounty program
Use a variety of tools to identify and manage application vulnerabilities
Perform risk assessments and work with developers to prevent security problems before they happen
Manage the end-to-end engineering and integration of AI/ML-driven security solutions into our DevSecOps pipeline and existing application security processes to maximize efficiency and coverage
Architect, build, and maintain the infrastructure and tooling necessary to successfully deploy and operate new AI-powered security capabilities
Proactively evaluate, pilot, and champion innovative ways to leverage artificial intelligence for vulnerability detection, threat modeling, and risk assessment optimization
Use threat modeling to provide security guidance to Engineers
Deliver secure development training
Complete security code reviews of new features and bug fixes
Complete security assessments of new products, services, and vendors
Perform risk assessments to add items to the security backlog and prioritize that backlog
Triage, reproduce, and work with application teams to fix bug bounty and pentest findings
Review security posture and roadmap, make suggestions, and bring new ideas to the table
Implement tooling into the DevSecOps pipeline to automate security testing
Coordinate with SecOps to ensure that incident response plans for application-related incidents are up-to-date and valid
Respond to incidents for high severity application vulnerabilities
Implement Product Security features to increase the overall security of the application
Triage and manage the results of automated scanning tools
Conduct penetration tests on significant code changes being released

Requirements

What you’ll need

Developing in multiple programming languages
Collaborating closely with development teams in a DevSecOps environment
Managing Bug Bounty programs
Demonstrated experience engineering and managing the integration of AI/ML models or tools into security pipelines (DevSecOps).
Enthusiasm for exploring and implementing emerging technologies, specifically AI, to solve complex security challenges and increase team efficiencyUsing Static and Dynamic Code Analysis tools
Building security checks into the CI/CD pipeline
Conducting application analysis with Burp Suite
Working with Terraform, Graylog, GCP, and Kubernetes
Performing website application penetration testing

Benefits

Comp & perks

As a full-time employee, Recurly offers competitive benefits programs, perks and options designed to fit your needs and the needs of your family.
We offer medical, dental and vision benefits and a menu from which to choose options that work best for you and eligible dependents.
We also offer life insurance, short and long-term disability, hospital indemnity, critical illness coverage, employee accident protection, health savings account (HSA) with company contribution & flexible spending account (FSA) options, employee assistance program, Legal and Pet Insurance.
Other perks may include:
401(k) Retirement Plan and company match
Flex Time Off
Company Events
Training/Development
Tuition reimbursement
Commuter benefits
Volunteer opportunities

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

programming languagesAI/ML integrationstatic code analysisdynamic code analysisapplication penetration testingsecurity code reviewsrisk assessmentsthreat modelingDevSecOpssecurity assessments

Soft Skills

collaborationcommunicationproblem-solvinginnovationtrainingprioritizationincident responsesecurity guidanceenthusiasm for technologyleadership