RemoteLeaf Logo
Log in Sign up

Staff Application Security Engineer

2 hours, 2 minutes ago
United States
Full-time
Lead
Application Security Engineer
Cybersecurity
Android AWS CI/CD Cloudflare Encryption Go iOS JavaScript Network Security Penetration Testing Python Secrets Management TypeScript
Apply Now
Fingerprint

Fingerprint

Fingerprint is a device intelligence platform offering 99.5% accurate visitor identification, actionable intelligence, and fraud detection solutions for developers. Globally dispersed and 100% remote, Fingerprint is known for its open-source project, F...

IT Services
51-250
Founded 2019
$77M raised
View All Jobs 3

Description

  • Design and implement a secure software development lifecycle covering threat modeling, secure code review, and pre-release testing.
  • Own and operate SAST, DAST, SCA, secrets-detection, container, and IaC security tooling within CI/CD.
  • Develop AI-assisted security triage, remediation, testing, and code-review workflows.
  • Build secure defaults, hardened libraries, reusable security patterns, and engineering automation.
  • Lead threat modeling, architecture reviews, hands-on security testing, and vulnerability remediation across platform components.
  • Manage application-layer incident response, including investigation, containment, root-cause analysis, and remediation.
  • Define application security logging and alerting requirements with Cloud Platform and engineering teams.
  • Enable engineering teams through consultations, training, code reviews, office hours, and a Security Champions program.
  • Partner with the Senior Manager, Application Security on roadmap execution and provide technical evidence for compliance and customer security reviews.
  • Support enterprise customer security conversations and third-party vendor security assessments.

Requirements

  • 8+ years of software engineering and/or security engineering experience, including 5+ years focused on application security.
  • Production software development experience with TypeScript/JavaScript, Go, Python, or similar languages.
  • Strong knowledge of web and API architectures, CI/CD pipelines, and engineering repositories.
  • Practical expertise in OWASP Top 10, authentication and authorization, API security, injection, SSRF, cryptography, business logic, and abuse vulnerabilities.
  • Experience leading threat modeling and architecture security reviews for complex systems.
  • Experience deploying and tuning SAST, DAST, SCA, secrets-detection, and related security tooling in CI/CD.
  • Experience operating AI-assisted security analysis, triage, or remediation in a production program.
  • Experience owning vulnerability management, including severity rating, remediation tracking, penetration testing, and SLAs.
  • Ability to influence engineering teams without authority and communicate risk to engineers, leadership, and customers.
  • Preferred experience includes fraud or identity security, AWS, mobile and client-side security, multi-tenant SaaS, bug bounty programs, AI/ML security, security certifications, or SOC 2/ISO 27001 controls.

Benefits

  • 100% remote, globally distributed work environment.
  • U.S. salary range of $177,000–$240,000, varying by location, experience, and expertise.
  • Example location ranges: NYC $209,000–$240,000 and Chicago $177,000–$204,000.
  • High-autonomy Staff-level role with the opportunity to establish a dedicated AppSec function.
  • Visa sponsorship is not available; candidates must be authorized to work from their home location.
  • Inclusive workplace committed to respecting and supporting diverse backgrounds and perspectives.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Apollo.io

Staff Application Security Engineer

Apollo.io 251-1K Professional Services

Apollo.io is hiring a Staff Application Security Engineer to lead application security strategy and hands-on security work across its product, platform, and AI-powered systems.

United States Full-time Lead Application Security Engineer
$225k-$282k
Docker Elasticsearch Kubernetes Linux MongoDB OAuth Penetration Testing Python React Ruby Ruby on Rails Terraform
1 hour, 32 minutes ago
Very Good Security

Application Security Engineer

Very Good Security 51-250 Internet Software & Services

VGS is hiring an Application Security Engineer to build a developer-focused security program for its global payment tokenization platform, improving application security throughout the software development lifecycle.

United States Canada Full-time Mid Level Application Security Engineer
$175k-$230k
AWS Burp Suite CI/CD GitHub GitLab Java Microservices Python
4 days, 2 hours ago
Harness.io

Senior Product Security Engineer

Harness.io 251-1K Internet Software & Services

Harness is hiring a Senior Product Security Engineer to secure its AI-powered software delivery platform by identifying vulnerabilities, building security tooling, and embedding secure practices across the software development lifecycle.

United States Full-time Senior Application Security Engineer
$150k-$200k
AWS Azure CI/CD DevSecOps GCP Java Kubernetes OWASP Penetration Testing REST API
4 days, 2 hours ago
Gomining

Product Security Engineer

Gomining 11-50 Construction & Engineering

Product Security Engineer partnering with engineering, Platform, and DevOps teams to secure applications, cloud infrastructure, APIs, and the software development lifecycle as the platform scales.

Latvia Poland Serbia Spain Cyprus Georgia Full-time Mid Level Application Security Engineer
AWS Azure Blockchain CI/CD Docker GCP Kubernetes Microservices Penetration Testing REST API Secrets Management
4 days, 2 hours ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers