Staff Application Security Engineer

About the role

We are looking for a senior individual contributor to lead and scale an application security function in a high‑growth technology environment. You will combine deep security expertise with hands‑on software engineering to embed security into product development and protect customers from fraud and abuse.

Key responsibilities

• Design and implement a secure software development lifecycle, including threat modeling, secure code reviews, and pre‑release testing.
• Own and improve application security tooling (SAST, DAST, SCA, secrets detection, container and IaC scanning) and integrate them into CI/CD pipelines.
• Develop AI‑first security approaches for vulnerability triage, automated remediation, and security testing.
• Lead threat modeling and architecture security reviews for APIs, SDKs, dashboards, and data pipelines.
• Manage vulnerability identification, risk assessment, prioritization, and remediation across scanners, pen‑tests, bug bounty reports, and customer disclosures.

Required profile

• 8+ years of software engineering and/or security engineering experience, with at least 5 years focused on application security.
• Proven ability to drive complex security initiatives independently and influence engineering teams through technical credibility.
• Excellent written and verbal communication skills for producing precise security findings and explaining risks to diverse audiences.

Required skills

• Strong programming in TypeScript, JavaScript, Go, or Python.
• Hands‑on experience with SAST, DAST, SCA, secrets detection, and CI/CD pipeline integration.
• Deep knowledge of OWASP Top 10 vulnerabilities, authentication/authorization design, API security, and cryptographic best practices.
• Practical use of AI‑assisted security tools for code analysis, vulnerability triage, or automated remediation.