Senior Application Security Engineer

Job Summary

Focusing on identifying and responding to security vulnerabilities, the full-time remote Senior Application Security Engineer will perform code reviews, penetration testing, and develop tooling to enhance secure developer workflows across the Brex platform.

Key responsibilities

• Identifying vulnerabilities and articulating their business impact to prioritize security efforts
• Conducting penetration testing and design reviews, collaborating with engineering and product teams to ensure secure product features
• Building and maintaining internal tools for automating security efforts and supporting secure development practices

Required qualifications

• 5+ years of experience in an Application Security or related role
• Proven ability to find vulnerabilities in complex systems and demonstrate business impact through custom attack chains
• Experience with secure development activities, including threat modeling and incident response
• Knowledge of Python and scripting languages for automation and tool development
• Collaborative mindset with strong written and verbal communication skills