Senior Application Engineer [Remote-US]

Quanata is an insurance technology innovation company that develops risk prediction and prevention solutions and digital insurance platforms. The Senior Application Security Engineer partners with engineering and data science teams to embed security throughout the software development lifecycle, with emphasis on AI/ML security, threat modeling, code reviews, vulnerability remediation, and AppSec automation.

Responsibilities:

• Partner with a product portfolio to manage product security, with a strong emphasis on AI/ML automation, security consulting and cross-functional collaboration with non-portfolio teams
• Lead security design reviews and threat modeling for APIs, web features, and service integrations
• Integrate security tooling—including SAST, SCA, and DAST—into CI/CD pipelines and developer workflows
• Review source code and deployment configurations to identify security vulnerabilities, and partner with developers to triage, remediate, and validate findings
• Support secure development practices across engineering teams, including maintaining AppSec guidance and contributing to security awareness and enablement
• Develop and deploy AppSec automation and integrations, utilizing AI/ML as possible, including ASVS scanning and Burp Suite Enterprise
• Support application security integration reviews, SaaS security assessments, and open-source software reviews
• Participate in cross-functional incident response and remediation planning

Requirements:

• Bachelor's degree or equivalent relevant experience
• 6–8 years of experience in application security or full-stack development with security expertise
• Strong understanding of secure coding practices in Python, JavaScript/TypeScript, Node.js, and web standards
• Familiarity with application risks and vulnerabilities, including the OWASP Top 10 (web and GenAI LLM), API security, SSRF, and related security concerns
• Experience with code scanning tools such as CodeQL, Wiz, SonarQube, or Snyk
• Comfortable reading and debugging complex codebases across the technology stack
• Clear and thoughtful communicator who can effectively guide engineers at all levels
• Experience with GraphQL security
• Participation in security champions programs or secure SDLC rollouts
• Contributions to open-source security tooling
• Familiarity with infrastructure-as-code and container security
• Experience automating,security, and developing with AI/ML