Staff Application & Product Security Engineer

📋 Description

• Own and continuously mature the secure software development lifecycle, including security
• Run and optimize SAST, SCA, secrets detection, container, and infrastructure-as-code scanning
• Build reusable secure patterns, reference implementations, and policy-as-code controls that make
• Lead developer security enablement through Security Champions programs, training campaigns
• Manage application and product vulnerabilities through risk-based triage, remediation SLAs
• Own the penetration testing program, including scoping third-party engagements, performing targeted

🎯 Requirements

• 6+ years of experience in application security, product security, or secure software engineering
• Strong software development capabilities in an object-oriented programming language, with Java
• Deep understanding of modern application attack surfaces, including authentication, authorization
• Hands-on experience integrating and tuning SAST, SCA, and secrets scanning within GitHub and CI/CD
• Demonstrated ability to reproduce security exploits against running applications, validate patches
• Experience coordinating vulnerability disclosure with external security researchers and customers

🎁 Benefits

• $160,000–$180,000 base compensation plus bonus opportunity.
• Healthcare, dental, and vision coverage.
• Flexible paid time off.
• Culture focused on support and sustainable work-life balance.
• 401(k) with company match.
• Flexible Spending Account (FSA) and Health Savings Account (HSA) options.