Security Engineer, Application Security

📋 Description

• Embed security reviews in the SDLC; catch auth flaws and logic bugs.
• Integrate SAST/DAST into CI/CD and shift security left.
• Drive vulnerability remediation across a large platform.
• Build security tooling and automate repetitive security tasks.
• Leverage AI tools and LLMs for code review and threat modeling.
• Operate bug bounty programs and triage HackerOne reports.

🎯 Requirements

• 5+ years in application security, security engineering, or secure software.
• Deep understanding of web security; OWASP Top 10 baseline.
• Strong in Python, TypeScript, or Go.
• Experience building/tuning SAST/DAST tooling (Semgrep, CodeQL, Snyk, Burp).
• Ability to threat model modern web apps, APIs, and auth patterns.
• Experience managing a vulnerability pipeline from discovery to remediation.

🎁 Benefits

• Bi-annual performance bonus structure
• Generous equity grant vested over 4 years
• Up to $15k relocation bonus
• $10K housing bonus near the office
• $1.5K monthly meals stipend
• Free Equinox membership