Staff Application Security Engineer

📋 Description

• Design and implement a secure software development lifecycle (SDLC), incorporating security
• Own and improve application security tooling, including static and dynamic application security
• Integrate security tools into CI/CD pipelines, reduce false positives, establish clear
• Develop an AI-first security engineering approach using AI-assisted vulnerability triage, automated
• Build reusable security patterns, hardened libraries, and secure defaults for authentication
• Contribute directly to production codebases by implementing security fixes, developing security

🎯 Requirements

• At least 8 years of experience in software engineering and/or security engineering, including 5 or
• Experience building or improving application security programs within a product engineering
• Strong software engineering fundamentals and the ability to write production-quality code in
• Familiarity with modern web applications, APIs, software architectures, source code repositories
• Deep practical application security expertise, including OWASP Top 10 and related vulnerabilities
• Ability to identify vulnerabilities through manual testing, explain their real-world impact, and

🎁 Benefits

• Annual base salary ranging from $177,000 to $240,000, depending on location, experience, and
• Location-based salary examples include $209,000–$240,000 for New York City and $177,000–$204,000
• Fully remote work environment, subject to geographic and regulatory restrictions.
• Significant technical autonomy and the opportunity to shape the application security function from
• Executive-level support for application security initiatives and collaboration with dedicated
• Opportunity to focus on hands-on engineering, security tooling, vulnerability discovery, and