Application Security Engineer

📋 Description

• Automate security controls by integrating security testing tools, including SAST, DAST, and SCA
• Develop secure SDLC practices by designing, maintaining, and communicating developer-friendly
• Manage the bug bounty program by coordinating private bug bounty activities, monitoring program
• Strengthen engineering capabilities by delivering secure coding training, sharing application
• Conduct application security reviews by performing threat modeling and secure code reviews for Java
• Promote security awareness by collaborating with communications teams to develop technical content

🎯 Requirements

• 3–5+ years of dedicated experience in Application Security and/or full-stack development.
• Practical experience reviewing Java and Python applications for security vulnerabilities.
• Strong familiarity with integrating SAST and DAST tools into modern CI/CD workflows, including
• Hands-on experience operating bug bounty programs, triaging findings, and defining program metrics
• Practical experience applying methodologies such as STRIDE to assess application and system risks.
• Strong communication skills and the ability to build trust and collaborate effectively with

🎁 Benefits

• Salary: The advertised annual salary range is $175,000–$230,000. The original posting does not
• Equity: Early equity opportunities.
• Retirement savings: 401(k) plan with a 4% employer match and immediate vesting, applicable to US
• Health and wellness: Medical, dental, and vision insurance; HSA/FSA options; life and disability
• Time off: Flexible paid time off, paid national holidays, and a global parental leave program.
• Professional development: Learning stipend, internal promotion opportunities, lunch-and-learn