Application Security Engineer

📋 Description

• Automate security controls: Integrate security testing tools, including SAST, DAST, and SCA, into
• Develop secure SDLC practices: Design, maintain, and communicate developer-friendly security
• Manage the bug bounty program: Coordinate private bug bounty activities, monitor program spending
• Strengthen engineering capabilities: Deliver secure coding training, share application security
• Conduct application security reviews: Perform threat modeling and secure code reviews for Java and
• Promote security awareness: Collaborate with communications teams to develop technical content

🎯 Requirements

• Relevant experience: 3–5+ years of dedicated experience in Application Security and/or full-stack
• Secure code assessment: Practical experience reviewing Java and Python applications for security
• Security tooling and automation: Strong familiarity with integrating SAST and DAST tools into
• Bug bounty management: Hands-on experience operating bug bounty programs, triaging findings, and
• Threat modeling: Practical experience applying methodologies such as STRIDE to assess application
• Communication and collaboration: Strong communication skills and the ability to build trust and

🎁 Benefits

• Salary: The advertised annual salary range is $175,000–$230,000. The original posting does not
• Equity: Early equity opportunities.
• Retirement savings: 401(k) plan with a 4% employer match and immediate vesting, applicable to US
• Health and wellness: Medical, dental, and vision insurance; HSA/FSA options; life and disability
• Time off: Flexible paid time off, paid national holidays, and a global parental leave program.
• Professional development: Learning stipend, internal promotion opportunities, lunch-and-learn