Staff Application Security Engineer
Core
Founding Staff Application Security Engineer building a secure SDLC, operating security tooling pipelines, and performing hands-on security testing and threat modeling for a fraud detection platform.
Role type
Staff Application Security Engineer (hands-on IC)
Builds
Secure SDLC, security tooling pipelines (SAST/DAST/SCA), AI-assisted security agents, and hardened security libraries.
Domain
Cybersecurity / Application Security / Fraud Detection
Required skills
Application Security (AppSec), Secure SDLC, Threat Modeling, Security Tooling (SAST/DAST/SCA), AI-assisted Security, Vulnerability Management, Hands-on Security Testing, TypeScript/JavaScript/Go/Python, API Security, Cryptography, Influence without Authority
Preferred skills
Fraud Detection, Bot Mitigation, Cloud Security (AWS), Mobile SDK Security, Bug Bounty Operations, AI/ML Security
Technologies
Snyk, TypeScript, JavaScript, Go, Python, AWS, Wiz, HackerOne, Bugcrowd
Responsibilities
Design and build secure development lifecycle integrated into engineering workflows; Own and operate security tooling pipelines with AI-first triage; Perform hands-on security testing and threat modeling for new products; Lead vulnerability management and incident response; Partner with engineering teams to build security culture and enablement.
Seniority
Staff, hands-on IC
