Application Security Engineer

📋 Description

• Integrate and automate application security tools, including Static Application Security Testing
• Design, implement, communicate, and maintain a developer-friendly Secure Software Development
• Conduct threat modeling exercises using established frameworks such as STRIDE to identify potential
• Perform application security reviews and secure code assessments for Java and Python microservices
• Lead the management and continuous improvement of the private bug bounty program, including
• Evaluate, configure, and optimize security tooling, including solutions such as GitHub Advanced

🎯 Requirements

• Three to five or more years of dedicated experience in application security and/or full-stack
• Practical experience performing secure code reviews and application security assessments for Java
• Strong knowledge of application security tooling and hands-on experience integrating SAST, DAST
• Familiarity with security tools and platforms such as GitHub Advanced Security, OWASP ZAP, Burp
• Experience managing or operating bug bounty programs, including vulnerability triage, remediation
• Practical experience with threat modeling methodologies, particularly STRIDE, and the ability to

🎁 Benefits

• Competitive annual salary: $175,000–$230,000, depending on qualifications, experience, and other
• Remote-first flexibility: Remote work opportunities, with hybrid arrangements for employees living
• Flexible working hours: Greater autonomy to organize your schedule and support work-life balance.
• Health insurance: Medical, dental, and vision coverage.
• Health savings and flexible spending accounts: HSA and FSA options to help manage eligible
• Retirement savings: A 401(k) plan with a 4% employer match and immediate vesting for eligible US