Application Security Engineer

Job Summary

As the application security expert, the full-time remote Application Security Engineer will manage red team findings, harden backend services and APIs, and oversee edge defenses to ensure security standards are met before launch.

Key responsibilities

• Review and reproduce red team findings, setting severity and writing actionable tickets
• Harden backend services and APIs, particularly those involved in money movement, often implementing fixes directly
• Develop secure configuration baselines and automated checks for cloud and code security

Required qualifications

• 4+ years of experience in application security, product security, or security-focused backend engineering
• Proven ability to influence security decisions and maintain relationships with engineering teams
• Hands-on experience with cloud security (preferably GCP) and edge defenses such as WAFs
• Familiarity with threat modeling and conducting architecture reviews
• Proficient in reading and analyzing codebases, particularly in TypeScript/Node.js