Senior Application Security Developer
Core
Architect and build automation tools to reduce toil, automate vulnerability discovery, drive automated remediation, and partner with product teams to achieve zero vulnerabilities open past SLA.
Role type
Senior IC application security developer (vulnerability management & automation)
Builds
Internal security tooling, automation pipelines, data aggregation services, and reporting dashboards for the vulnerability management lifecycle
Domain
Legal technology, Application Security, Vulnerability Management
Required skills
Software development (Ruby, Python, JavaScript), Vulnerability management, Web application security, Cloud security, Architecture review, Threat modeling, Automation development, Root-cause analysis, AI/LLM integration
Preferred skills
Experience with vulnerability scanners/SAST tools, Container security, Infrastructure-as-Code scanning, Cloud security posture tools
Technologies
Ruby, Python, JavaScript, Claude Mythos, Daybreak, Overlord, SAST, IaC, Cloud security tools
Responsibilities
Develop automation tooling to ingest vulnerability sources and generate automated fix PRs; Integrate multiple finding sources (CVEs, SAST, secrets, pentest, bug bounty) into a unified pipeline; Provide technical guidance and remediate complex vulnerabilities in core codebases; Build data pipelines and dashboards for security scorecards and SLA compliance; Participate in incident response and security culture initiatives
Seniority
Senior, hands-on IC
