Senior Application Security Engineer
Core
Senior Application Security Engineer conducting application security reviews, vulnerability management, and AI security practices for a personal finance platform.
Role type
Senior hands-on IC application security engineer (AI security)
Builds
Secure Django/Python web and API surfaces, LLM-integrated features, and agentic systems
Domain
Fintech / Application Security / AI Security
Deliverable
production ML models
Required skills
Application security (threat modeling, SAST/DAST, secure code review), Python, AI/ML security (prompt injection, model abuse, agentic attack surfaces), vulnerability management, penetration testing, security automation
Preferred skills
Fintech experience, SOC 2/NIST CSF compliance, AWS cloud security (IAM, ECS/EKS), detection engineering, offensive security (red teaming, bug bounty)
Technologies
Django, Python, Semgrep, Burp Suite, Nuclei, CI/CD pipelines, AWS, ECS, EKS
Responsibilities
Conduct threat modeling, code review, and risk assessment for new features; perform and improve SAST/DAST operations in CI/CD; manage vulnerability backlog and remediation; coordinate penetration testing; apply and improve AI security review processes for LLM features; build security automations and AI-powered tooling; participate in weekly security on-call rotation
Seniority
Senior, hands-on IC
