Partner with engineering and product teams to design and build secure systems across web, mobile, and backend environments.
Lead threat modeling, code reviews, and vulnerability assessments to identify and mitigate risks early in the SDLC.
Define and evolve secure development practices, including tooling, automation, and developer education.
Investigate and respond to application security incidents, drive root cause analysis, and implement long-term preventive measures.
Evaluate new security technologies and approaches to continuously raise the bar for application and protocol security.
Mentor engineers and foster a culture of security awareness and shared responsibility.

Bachelor’s or Master’s degree in Computer Science, Engineering, or a related field.
5+ years of experience in application security or related fields, ideally with experience in fast-moving or high-impact environments.
Strong understanding of web, mobile, and cryptographic security fundamentals (e.g. OWASP Top Ten, SANS/CWE Top 25).
Hands-on experience with security testing tools and methodologies (static/dynamic analysis, pen testing, etc.).
Proficiency in programming and scripting languages (Java, Javascript, Python preferred)
Experience with cloud and containerized environments (AWS, GCP, Docker, Kubernetes).
Excellent communication skills and the ability to influence and collaborate across teams.

company-paid medical, dental, & vision for you and your dependents
wellness offerings including a partnership with Equinox Fitness Clubs
401(k) with 4% employer contribution
annual $1,500 education stipend
unlimited and encouraged time off
up to 16 weeks paid parental leave
home office setup stipend for remote employees
daily lunches at NY headquarters (all benefits are subject to applicable taxes and based on eligibility)

Senior Application Security Engineer

Key skills