Application Security Engineer

Job Summary

Partnering across Security and Engineering, the full-time remote Application Security Engineer will build a developer-centric security program by automating security controls, defining secure SDLC processes, and managing a private bug bounty program.

Key responsibilities

• Automate security controls by integrating proactive security tooling into CI/CD pipelines
• Define and drive secure SDLC processes, frameworks, and threat modeling practices
• Manage the bug bounty program, including triaging reports and tracking metrics

Required qualifications

• 3-5+ years of experience in Application Security and/or full stack development
• Practical experience conducting secure code assessments for Java and Python applications
• Familiarity with integrating SAST/DAST tools into modern CI/CD systems
• Hands-on experience operating bug bounty programs and setting program metrics
• Experience applying threat modeling frameworks like STRIDE to complex systems