Application Product Security Engineer

The Application Product Security Engineer will help establish and advance application security practices by partnering with engineering teams, improving security processes, and ensuring products are designed and delivered securely. This role requires strong technical judgment, collaboration skills, and the ability to operate effectively in a dynamic environment.

• Partner with product and engineering teams throughout the product lifecycle to identify security risks and implement secure solutions from the beginning.
• Lead threat modeling activities and secure design reviews for new features, products, and architectural changes.
• Conduct security-focused code reviews and support engineers in remediating vulnerabilities while improving secure development practices.
• Build, maintain, and improve application security tooling, including static analysis, dependency scanning, and secrets detection integrated into development workflows.
• Participate in security incident response activities, including investigation, containment, remediation, and post-incident improvements.
• Review and prioritize findings from vulnerability assessments, penetration tests, security scans, and responsible disclosure programs.
• Develop security guidelines, reusable patterns, and training materials that help engineering teams adopt secure practices.
• Support broader security initiatives, including cloud security improvements, customer security assessments, and internal security enhancements.
• Evaluate emerging security risks and technologies to continuously improve application protection strategies.
• Collaborate with cross-functional teams to balance security requirements with product goals and engineering velocity.

Requirements:

The ideal candidate is a security-focused engineer with experience securing software applications and collaborating closely with development teams. Success in this role requires strong technical fundamentals, practical security knowledge, and the ability to communicate effectively across technical and business audiences.

• 2–4 years of experience in application security, product security, software engineering with security responsibilities, or a related security-focused role.
• Strong understanding of common application vulnerabilities, including OWASP Top 10 risks, authentication and authorization issues, injection vulnerabilities, and security design principles.
• Experience with threat modeling, secure architecture reviews, and communicating security risks in a practical and actionable way.
• Hands-on experience supporting security incidents, including detection, investigation, response, and remediation activities.
• Ability to read and write code in languages such as Python, TypeScript/JavaScript, Go, or similar technologies.
• Experience reviewing application code and identifying security weaknesses within real-world software systems.
• Familiarity with application security tooling such as SAST, dependency scanners, vulnerability scanners, and CI/CD security integrations.
• Strong communication and collaboration skills with the ability to build trusted relationships with engineering teams.
• Ability to work independently, manage changing priorities, and take ownership in an evolving environment.
• Strong problem-solving skills and a proactive approach to improving security practices.

Preferred Qualifications:

• Experience working in a startup environment or within a small, highly collaborative security team.
• Knowledge of cloud security practices across platforms such as AWS, GCP, or Azure.
• Experience securing AI-powered applications, machine learning systems, or products handling sensitive financial information.
• Familiarity with security and compliance frameworks such as SOC 2 or GDPR.
• Contributions to security communities, bug bounty programs, capture-the-flag competitions, or open-source security projects.

Benefits:

• Competitive base salary range of $130,000–$170,000, depending on experience and location.
• Equity participation opportunities.
• Fully remote, remote-first work environment.
• Health, dental, and vision insurance coverage.
• Flexible paid time off policy.
• Opportunity to shape security strategy and engineering practices in a growing organization.
• High ownership role with direct impact on product security and customer trust.
• Collaborative culture focused on innovation, inclusion, and continuous improvement.