Application Security Engineer

Job Summary

As a full-time remote Application Security Engineer, the successful candidate will ensure the security of code deployed within the financial and blockchain ecosystem by identifying vulnerabilities and engineering automated solutions that facilitate secure development practices.

Key responsibilities

• Perform deep-dive security reviews of web applications, APIs, and cloud infrastructure
• Develop security-focused tools and libraries to assist developers in writing secure code
• Manage the end-to-end lifecycle of vulnerabilities, collaborating with engineers on remediation strategies

Required qualifications

• Expert-level knowledge of OWASP Top 10, CWE, and API security vulnerabilities
• Experience building and scaling security checks into CI/CD pipelines
• Working knowledge of AWS/GCP security configurations, particularly IAM and VPCs
• Proven ability to perform manual security testing and secure production-quality code
• Familiarity with programming languages such as Go, Java, or Ruby