Senior Application Security Engineer (Remote)

3 months, 1 week ago
Full-time
Senior
Cybersecurity
Brex

Brex

Brex is an AI-powered spend platform that offers integrated corporate cards, expenses, travel, and payments in over 100 countries. With a unified platform for corporate cards, expense management, reimbursements, travel, business accounts, and bill pay,...

Diversified Financial Services
1K-5K
Founded 2017
$1800M raised

Description

  • Identify vulnerabilities across the Brex platform and articulate their business impact to drive prioritization.
  • Perform penetration testing and design reviews to uncover insecure designs and security weaknesses.
  • Partner with engineering and product teams to design secure product features.
  • Build and maintain internal tooling to automate security efforts and improve secure developer workflows.
  • Run static and dynamic application security testing across the Brex platform.
  • Support secure development practices across the broader engineering organization.
  • Collaborate closely with Security Operations, GRC, Product Security, Front End Platform, and IT Infrastructure teams.
  • Provide technical leadership, learning sessions, and mentorship to strengthen security culture.
  • Help secure AI and agentic product features by identifying attack vectors and working with product and engineering teams.

Requirements

  • 5+ years of work experience in an Application Security or related role.
  • Demonstrated ability to find vulnerabilities in complex systems and show business impact through custom attack chains.
  • Experience with secure development activities such as threat modeling, developer education, and incident response.
  • Knowledge of Python, scripting languages, and AI/agentic workflows to automate tasks and build tools.
  • Strong written and verbal communication skills with a collaborative mindset.
  • Proficiency with Kotlin, gRPC, GraphQL, and Kubernetes is preferred.
  • Previous experience as a software engineer is preferred.
  • Consultancy experience performing web application security reviews is preferred.
  • Experience securing distributed systems in AWS and cloud environments is preferred.
  • Experience pentesting and securing agentic features and systems is preferred.
  • Experience contributing to the technical community through open source, research, mentorship, blogging, CVEs, presentations, or community organizing is preferred.
  • Experience submitting to bug bounty programs or responsible disclosure programs is preferred.

Benefits

  • Expected salary range of $192,000 to $240,000.
  • Equity and other forms of compensation may be included in the total compensation package.
  • Opportunity to work on high-impact security challenges across a leading finance platform.
  • Exposure to cross-functional collaboration with multiple engineering and security teams.
  • Opportunity to influence and secure Brex’s AI-driven product future.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Application Security Engineer

Bugcrowd 1K-5K Internet Software & Services

Bugcrowd is hiring a remote Application Security Engineer to triage and validate vulnerability submissions for large-scale bug bounty programs while coordinating with clients and security researchers.

Burp Suite Nmap
7 hours, 14 minutes ago

Senior Product Security Engineer

Alphasense 51-250 Industrial Conglomerates

AlphaSense is hiring a Senior Product Security Engineer to secure its AI-native market intelligence platform by embedding AI/ML security, secure architecture, and assurance practices across the product lifecycle.

CI/CD DevSecOps Encryption Java JavaScript Kubernetes Python SAML Secrets Management TLS
7 hours, 44 minutes ago

Product Security Engineer

Modern Health 251-1K Health Care Providers & Services

Modern Health is hiring a remote Product Security Engineer to strengthen security and compliance across its mental health platform, applications, cloud infrastructure, and software development lifecycle.

Agile AWS Bash CI/CD Cybersecurity Datadog Django Flask GitLab HashiCorp Vault Packer Penetration Testing PostgreSQL Python Redis Terraform
2 days, 7 hours ago

Application Security Engineer - Senior

Banco Plata, S.A., Institución de Banca Múltiple. 1001-5000 Banking / financial services

Plata is seeking an Application Security Engineer to join its Information Security team and embed security controls, testing, and practices throughout the software development lifecycle.

Burp Suite CI/CD Kubernetes Microservices OWASP Penetration Testing
4 days, 7 hours ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers