Senior Security Application Engineer

📋 Description

• Lead comprehensive threat modeling and product security architecture reviews in collaboration with cross-functional teams.
• Integrate security automation into CI/CD pipelines utilizing SAST, DAST, and continuous vulnerability management tools.
• Architect and implement secure-by-default cloud infrastructure on AWS using Terraform and Kubernetes.
• Design and deploy robust encryption services, key management systems (KMS), and advanced data protection controls across distributed environments.
• Oversee operational security initiatives including corporate bug bounty programs, incident response workflows, and regular penetration testing engagements.
• Engineer proactive defenses to safeguard platform infrastructure against sophisticated adversaries and nation-state-level threats.

🎯 Requirements

• 8+ years building and scaling end-to-end security programs for startups.
• FinTech, Web3, and digital asset security experience.
• Strong engineering in distributed systems, microservices, Python or Java.
• Hands-on container security, Kubernetes, and AWS hardening.
• Technical controls for SOC 2 Type II and GDPR compliance.
• Expertise securing AI/ML lifecycles, MLOps, and agentic AI.
• Bachelor's degree in CS, Engineering, or equivalent.

🎁 Benefits

• Competitive base salary, bonus and stock options
• 100% company-paid health insurance for employee and dependents
• Up to 4% 401k company match
• Paid parental leave and vacation
• Free commuter/parking pass near BART and Muni
• Free meals and snacks