Senior Staff Application Security Engineer

You will own application security across product development. You will threat-model features and services, harden code, APIs, authentication, and authorization, establish secure SDLC controls, secure AI application surfaces, remediate material risks, and help engineers ship secure production code.

Responsibilities

• Threat-model features and services and drive risk remediation
• Secure applications against injection, broken authentication and authorization, and insecure APIs
• Build and run secure SDLC controls, including SAST, DAST, dependency security, secrets management, and pre-production testing
• Harden authentication, authorization, and session and identity handling
• Secure AI application surfaces, model and inference endpoints, and prompt and input handling
• Partner with product and platform engineering to design security early
• Set standards for secure code delivery

Requirements

• 6+ years in security engineering
• Application security expertise
• Knowledge of code, API, and authorization design
• Experience building application-security practices and secure-SDLC tooling
• Knowledge of modern application stacks
• AWS experience
• Ability to write and ship production-quality code
• Knowledge of AI and LLM threat classes
• Eligibility to work in the U.S.

Benefits

• Company equity package
• 401(k) with 3% employer match and Roth 401(k)
• Medical, dental, and vision insurance with PPO, HSA, and FSA options
• 11 paid holidays
• Unlimited PTO and sick time
• 16 weeks of paid parental leave
• Creative education stipend
• Commuter allowance
• In-office lunch five days per week