Application Security Engineer

Job summary

Responsibilities

TL;DR We are seeking an Application Security Engineer to champion security across our entire development lifecycle. You’ll play a pivotal role in reviewing code, designing secure features, and mentoring engineers, ensuring security is at the heart of everything we build.

• Conduct secure code reviews, threat modeling, and architecture assessments to identify and mitigate vulnerabilities early.
• Work closely with engineering teams to design and implement security features, provide actionable feedback, and ensure security is embedded in product development.
• Lead security training, workshops, and 1:1 mentoring to upskill developers and foster a security-first culture.
• Integrate SAST/DAST and supply chain security tools into our CI/CD pipelines for continuous, automated protection.
• Detect, triage, and respond to application vulnerabilities and incidents, driving remediation and continuous improvement.

What they're looking for

• 5+ years of experience in application security, securing cloud-native environments at product-focused tech companies, high-growth startups, or leading AI labs.
• Strong programming and engineering skills.
• Deep expertise in application security: secure code review, threat modeling, SAST/DAST, supply chain security, product patching, and vulnerability management.
• Strong background in securing engineering infrastructure: CI/CD pipelines, secrets management, service-to-service authentication, containerized workloads, and public cloud…
• Hands-on experience collaborating with developers to design and implement security features and best practices.

Tech stack

• React
• TypeScript
• Go
• Rust
• GCP
• AWS
• Terraform