Application Security Engineer
Core
Embed security across the application lifecycle by partnering with R&D, DevOps, and product teams to secure applications, APIs, repositories, and cloud services.
Role type
Senior Application Security / Security Architect
Builds
Secure applications, APIs, and cloud services for a global payroll and payments platform
Domain
B2B Fintech / Payroll & Payments
Required skills
threat modeling, secure software development lifecycles, architecture reviews, vulnerability management, SAST/DAST/SCA, secrets management, code review, penetration testing, bug bounty management, AI-assisted security analysis
Preferred skills
cloud-native security architecture, distributed systems security, CI/CD security, developer enablement (via careerplan.io/jobs/16-005-4F-07A-application-security-engineer-at-papaya-global)
Technologies
SAST, DAST, SCA, CSPM, AI tools for vulnerability analysis
Responsibilities
Own and mature the application-security and security-architecture program; Conduct threat modeling and security design reviews; Define security requirements and patterns for auth, authorization, and data protection; Review source code and high-risk configurations; Validate and prioritize vulnerability findings; Own penetration testing and bug bounty programs; Drive preventive improvements in engineering practices.
Seniority
Senior, hands-on IC
