Senior Application Security Engineer

📋 Description

• Own vulnerability management end-to-end across product, codebases, and cloud (AWS/GCP/Cloudflare)
• Build and operate AppSec tooling: secrets, SCA, SAST in CI/CD pipelines
• Enforce security hygiene standards in codebases, including AI-generated code reviews
• Partner with AI team to design guardrails for safe AI-assisted development
• Secure the SaaS stack: harden configurations, OAuth reviews, and third-party integrations

🎯 Requirements

• 5+ years in hands-on security engineering, focused on AppSec/product security
• Strong software fundamentals; able to read, write, and remediate code
• Deep AppSec toolchain experience: secrets scanning, SCA, SAST, CI/CD (GitHub-centric)
• Practical experience securing SaaS: OAuth review, config hardening, least-privilege
• Working knowledge of cloud security across AWS and/or GCP, and edge/CDN security (Cloudflare)
• Pragmatic, risk-based mindset; AI-assisted security perspective

🎁 Benefits

• Competitive salary and equity package
• Unlimited PTO and paid holidays
• Medical, dental, and vision plans
• 401(k), Commuter, and HSA/FSA plans
• NYC office in the heart of Manhattan
• Lunch and snacks provided in the office