Own end-to-end application security for all Self products
Conduct and manage vulnerability scanning, triage, and remediation tracking using security tools (e.g., SAST)
Partner closely with engineering and product teams to remediate critical security findings
Lead and perform third-party vendor security reviews and risk assessments
Support SOC 2 and PCI compliance efforts, including audit preparation and evidence collection
Identify application-level security risks and recommend mitigation strategies
Help embed secure-by-design practices into product development processes
Monitor emerging application security threats and recommend appropriate controls

Requirements

Strong experience in application security, product security, or software security engineering
Experience with application security scanning using GitLab SAST
Hands-on experience with vulnerability management tools and remediation workflows
Knowledge of secure software development practices and common application vulnerabilities
Experience supporting or operating within SOC 2 and PCI compliance environments
Ability to partner effectively with engineering teams to drive security outcomes
Strong risk assessment, prioritization, and communication skills
Experience performing third-party vendor security assessments (preferred)
Familiarity with cloud-native application architectures (preferred)
Prior experience in fintech, regulated industries, or environments handling sensitive customer data (preferred)
Security certifications (e.g., CISSP, CSSLP, GWAPT) or equivalent experience (preferred)

Benefits

Company equity in the form of Stock Options
Performance-based bonuses
Generous employer-paid health, vision and dental insurance coverage
Flexible vacation policy
Educational assistance
Free gym membership
Casual dress code
Team building events and activities
Remote work arrangements/ flexible work schedule
Paid parental leave

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

application securityvulnerability scanningremediation trackingGitLab SASTvulnerability management toolssecure software development practicesapplication vulnerabilitiesrisk assessmentcloud-native application architectures

Soft Skills

communication skillspartnering effectivelyrisk prioritization

Certifications

CISSPCSSLPGWAPT