Senior Application Security Engineer

📋 Description

• Triage, validate, route, and drive remediation of findings from every source: SAST, DAST, SCA, code
• Build the automation that removes manual effort from each of those steps
• External pentests and bug bounty program: set scope, direct the testers, judge severity, and close
• Spot the patterns across findings and remove the root cause, not just the instance
• Set the secure patterns and defaults that make the right way the easy way
• Write custom static analysis rules for our own anti-patterns, so a fixed bug class stays fixed

🎯 Requirements

• Vulnerability management, automated. Experience running vulnerability management end to end, and
• An engineering background. You have shipped and maintained real software. You read unfamiliar code
• Ownership to done. You take problems all the way through, including fixes that depend on other
• Judgment over tenure. We care more about the depth of your judgment than your years of experience.
• Code auditing in at least one of Go, Python, Node.js, Ruby, or Java, and the willingness to work in
• Practical command of the OWASP Top 10, with real depth in broken access control and business logic

🎁 Benefits

• Generous compensation in cash and equity
• Early exercise for all options, including pre-vested
• Work from anywhere: Remote-first Culture
• Flexible paid time off and Year-end break
• Health insurance, dental, and vision coverage for employees and dependents - US and Canada specific
• 4% matching in 401k / RRSP - US and Canada specific