Senior Application Security Engineer

About the role

We are hiring a Senior Application Security Engineer to own the security of the software we build. You will partner closely with engineering to embed security into the Software Development Lifecycle, keep dependencies and the supply chain safe, and ensure the product customers trust is built on a secure foundation.

Key responsibilities

• Embed security into the SDLC through threat modeling, secure design reviews, and secure‑coding guidance.
• Own application security testing, including code review, SAST/DAST, and triage, driving issues to remediation.
• Harden the software supply chain with dependency verification, safe dependency management, and CI/CD pipeline security.
• Build and automate security tooling and guardrails so security scales with engineering.
• Serve as the internal security SME on product and workflow decisions and partner on architecture and design.

Required profile

• 5+ years of hands‑on security engineering experience in product/application security.
• Strong software engineering skills and ability to work across the stack (e.g., Python, Go, Typescript).
• Deep expertise in secure SDLC, threat modeling, code scanning, and supply‑chain security.
• Fluency with the modern AI landscape and its impact on security.
• Comfortable being an early security hire in a fast‑growing startup with high ownership.

Required skills

• Python
• Go
• Typescript
• SAST and DAST tools
• CI/CD pipeline security and dependency verification

What we offer

• Base salary range $100,000 – $300,000 annually (USD).
• Potential variable compensation, equity, and comprehensive benefits.
• Inclusive and diverse company culture with no discrimination based on gender, ethnicity, or other protected characteristics.