Application Security Engineer

Job Summary

To support a growing product security team, the full-time remote Application Security Engineer will collaborate with development teams to implement security best practices, manage vulnerability processes, and conduct security assessments to enhance the security posture of applications.

Key responsibilities:

• Collaborate with development and Site Reliability Engineering teams to strengthen security practices throughout the SDLC
• Implement and automate vulnerability management processes, prioritizing and remediating identified vulnerabilities
• Conduct threat modeling, code audits, and design reviews, providing actionable recommendations for secure development

Required qualifications:

• 4+ years of experience in secure development or application security
• Deep knowledge of security concepts such as authentication and web architecture
• Experience with programming languages such as Node.js and Go
• Familiarity with security assessment tools like Burp, ZAP, Qualys, and Nessus
• Understanding of industry security practices and regulations such as FedRAMP and SOC2 is a plus