Senior Application Security Engineer

Job Summary

Focused on application and platform security, the full-time Senior Application Security Engineer will identify and remediate vulnerabilities across applications and cloud infrastructure while developing secure defaults and automation in a remote work environment.

Key responsibilities

• Lead security design reviews and threat models for new product features, emphasizing authentication and authorization
• Perform manual code reviews and security testing, addressing authorization and business logic flaws that automated tools may overlook
• Design secure libraries and frameworks, and provide remediation guidance for identified vulnerabilities

Required qualifications

• 5+ years of experience in application or product security, or software engineering with a strong security focus
• Deep experience in manual code review, particularly in identifying vulnerabilities related to authorization and business logic
• Strong proficiency in Python and working knowledge of JavaScript/TypeScript for front-end code review
• In-depth knowledge of OAuth 2.0/OIDC, SAML, MFA, and access control models, with practical implementation experience
• Experience leading threat modeling sessions and translating findings into actionable requirements