Application Security Engineer

Job Summary

Focused on application security, the full-time remote Application Security Engineer II will manage vulnerability assessments, drive remediation efforts, and automate security workflows to protect the MyFitnessPal product experience.

Key responsibilities

• Own day-to-day application security vulnerability management, including triaging findings and driving tickets to resolution
• Operate and grow the bug bounty program, validating findings and coordinating with vendors
• Build and maintain security automation to normalize vulnerability intake and produce program metrics

Required qualifications

• 2-4 years of experience in security engineering, application security, or software engineering
• Understanding of application security assessment techniques and remediation steps
• Knowledge of secure development practices for web and mobile applications
• Experience with AI-assisted tooling and vulnerability management processes
• Education equivalent to a BS in Computer Science or related field; relevant certifications are a plus