RemoteLeaf Logo
Log in Sign up

Sr. Application Security Engineer

2 months, 4 weeks ago
United States
Full-time
Senior
Application Security Engineer
Cybersecurity
Apply Now
Mitek Systems

Mitek Systems

Mitek Systems develops and provides mobile capture and identity verification software solutions that enable enterprises to securely verify user identities and facilitate transactions through mobile devices, enhancing customer experiences while preventi...

Communications Equipment
251-1K
Founded 1985
View All Jobs 4

Description

  • Own the application vulnerability remediation program with prioritized developer guidance and clear SLAs.
  • Work with development squads to explain findings, validate fixes, and confirm remediation.
  • Drive systemic root-cause fixes and escalate unresolved critical and high findings.
  • Define and own the secure development lifecycle, including security gates and review checkpoints.
  • Configure, tune, and operationalize SAST, DAST, and SCA tools to produce actionable output.
  • Embed security requirements into product planning and architecture decisions.
  • Threat-model new features and architectural changes before code is written.
  • Review authentication, authorization, data-flow, and cryptographic risks in designs.
  • Produce written threat models for developer guidance and audit evidence.
  • Own API security standards such as OAuth 2.0, mTLS, rate limiting, and abuse prevention.
  • Conduct or coordinate manual secure code reviews of security-sensitive components.
  • Lead application penetration-testing cycles, including scoping, tester management, and finding validation.
  • Build and run a Security Champions program across development squads.
  • Deliver developer security training on OWASP Top 10 and secure-coding patterns.
  • Create runbooks, coding standards, and pattern libraries developers can use independently.

Requirements

  • 5–8 years of experience in application/product security or security-focused software engineering.
  • Experience with application penetration testing, including business-logic and API testing.
  • Hands-on experience tuning and operationalizing SAST, DAST, and SCA.
  • Secure code review experience across at least two web-application languages.
  • Threat modeling experience using STRIDE, PASTA, or equivalent methods.
  • Strong knowledge of OWASP Top 10 and API security risks, with the ability to influence development teams.
  • Experience in financial services, fintech, or SaaS for regulated industries (preferred).
  • Knowledge of financial-sector threats such as fraud, account takeover, and API abuse (preferred).
  • Cloud-native application security, including container security, is preferred.
  • Understanding of PCI-DSS application security requirements is preferred.
  • OSCP, GWEB, or CSSLP certification is preferred.
  • Prior experience building a Security Champions program is preferred.

Benefits

  • Ownership of the AppSec function with clear scope and executive visibility.
  • Work on internet-facing financial software with complex API integrations in a US/EU regulatory context.
  • Direct collaboration with the VP of IT and Security and engineering leadership.
  • A security-minded development team that is open to partnership.
  • A proactive security program investing from a position of strength.
  • Competitive, equitable compensation and benefits programs.
  • Universal, supplemental, and private healthcare plan choices.
  • Retirement/pension contributions and MTK stock plan participation.
  • Generous annual leave, company holidays, and volunteer time off.
  • Learning benefits including an e-learning license, tuition reimbursement, and hackathons.
  • Home office setup allowance.
  • Optional benefits such as pet insurance, identity theft protection, and legal assistance.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Apollo.io

Staff Application Security Engineer

Apollo.io 251-1K Professional Services

Apollo.io is hiring a Staff Application Security Engineer to lead application security strategy and hands-on security work across its product, platform, and AI-powered systems.

United States Full-time Lead Application Security Engineer
$225k-$282k
Docker Elasticsearch Kubernetes Linux MongoDB OAuth Penetration Testing Python React Ruby Ruby on Rails Terraform
3 days, 1 hour ago
Fingerprint

Staff Application Security Engineer

Fingerprint 51-250 IT Services

Fingerprint is hiring a Staff Application Security Engineer to build and operate its foundational AppSec function, securing the device-intelligence platform and raising security standards across engineering.

United States Full-time Lead Application Security Engineer
$177k-$240k
Android AWS CI/CD Cloudflare Encryption Go iOS JavaScript Network Security Penetration Testing Python Secrets Management TypeScript
3 days, 1 hour ago
Very Good Security

Application Security Engineer

Very Good Security 51-250 Internet Software & Services

VGS is hiring an Application Security Engineer to build a developer-focused security program for its global payment tokenization platform, improving application security throughout the software development lifecycle.

United States Canada Full-time Mid Level Application Security Engineer
$175k-$230k
AWS Burp Suite CI/CD GitHub GitLab Java Microservices Python
1 week ago
Harness.io

Senior Product Security Engineer

Harness.io 251-1K Internet Software & Services

Harness is hiring a Senior Product Security Engineer to secure its AI-powered software delivery platform by identifying vulnerabilities, building security tooling, and embedding secure practices across the software development lifecycle.

United States Full-time Senior Application Security Engineer
$150k-$200k
AWS Azure CI/CD DevSecOps GCP Java Kubernetes OWASP Penetration Testing REST API
1 week ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers