Application Security Engineer Remote
Core
Embed security into application design and development across an AI-native platform, partnering with Product and Engineering teams to ensure products and services are secure by default.
Role type
Senior IC application security engineer
Builds
Automated security guardrails, secure code review processes, and threat modeling solutions for complex systems
Domain
Insurance technology, AI/LLM security, cloud security
Deliverable
production ML models
Required skills
Application security frameworks (OWASP, ASVS, MASVS), threat modeling (STRIDE, PASTA), secure code review, vulnerability analysis, cloud platform knowledge, programming language proficiency, secure-by-design principles
Preferred skills
CSSLP/GWEB/OSWE certifications, regulated industry experience, mobile app security, penetration testing, AI/LLM security, automation of security processes
Technologies
AI, Cloud, LLM, Mobile, OWASP, QA Testing, Security
Responsibilities
Partner with Product and Engineering to incorporate security into design and development; Lead threat modeling and identify practical security solutions; Conduct secure code reviews, application security assessments, and vulnerability analyses; Build and implement automated security guardrails across the SDLC; Investigate, prioritize, and drive remediation of application security findings; Promote secure coding through training and coaching; Collaborate with Security, Privacy, and Business Assurance teams on compliance and risk management; Develop and maintain security standards and best practices
