RemoteLeaf Logo
Log in Sign up

Sr. Application Security Engineer

2 months, 1 week ago
United States
Full-time
Senior
Application Security Engineer
Cybersecurity
Apply Now
Mitek Systems

Mitek Systems

Mitek Systems develops and provides mobile capture and identity verification software solutions that enable enterprises to securely verify user identities and facilitate transactions through mobile devices, enhancing customer experiences while preventi...

Communications Equipment
251-1K
Founded 1985
View All Jobs 7

Description

  • Own the application vulnerability remediation program with prioritized developer guidance and clear SLAs.
  • Work with development squads to explain findings, validate fixes, and confirm remediation.
  • Drive systemic root-cause fixes and escalate unresolved critical and high findings.
  • Define and own the secure development lifecycle, including security gates and review checkpoints.
  • Configure, tune, and operationalize SAST, DAST, and SCA tools to produce actionable output.
  • Embed security requirements into product planning and architecture decisions.
  • Threat-model new features and architectural changes before code is written.
  • Review authentication, authorization, data-flow, and cryptographic risks in designs.
  • Produce written threat models for developer guidance and audit evidence.
  • Own API security standards such as OAuth 2.0, mTLS, rate limiting, and abuse prevention.
  • Conduct or coordinate manual secure code reviews of security-sensitive components.
  • Lead application penetration-testing cycles, including scoping, tester management, and finding validation.
  • Build and run a Security Champions program across development squads.
  • Deliver developer security training on OWASP Top 10 and secure-coding patterns.
  • Create runbooks, coding standards, and pattern libraries developers can use independently.

Requirements

  • 5–8 years of experience in application/product security or security-focused software engineering.
  • Experience with application penetration testing, including business-logic and API testing.
  • Hands-on experience tuning and operationalizing SAST, DAST, and SCA.
  • Secure code review experience across at least two web-application languages.
  • Threat modeling experience using STRIDE, PASTA, or equivalent methods.
  • Strong knowledge of OWASP Top 10 and API security risks, with the ability to influence development teams.
  • Experience in financial services, fintech, or SaaS for regulated industries (preferred).
  • Knowledge of financial-sector threats such as fraud, account takeover, and API abuse (preferred).
  • Cloud-native application security, including container security, is preferred.
  • Understanding of PCI-DSS application security requirements is preferred.
  • OSCP, GWEB, or CSSLP certification is preferred.
  • Prior experience building a Security Champions program is preferred.

Benefits

  • Ownership of the AppSec function with clear scope and executive visibility.
  • Work on internet-facing financial software with complex API integrations in a US/EU regulatory context.
  • Direct collaboration with the VP of IT and Security and engineering leadership.
  • A security-minded development team that is open to partnership.
  • A proactive security program investing from a position of strength.
  • Competitive, equitable compensation and benefits programs.
  • Universal, supplemental, and private healthcare plan choices.
  • Retirement/pension contributions and MTK stock plan participation.
  • Generous annual leave, company holidays, and volunteer time off.
  • Learning benefits including an e-learning license, tuition reimbursement, and hackathons.
  • Home office setup allowance.
  • Optional benefits such as pet insurance, identity theft protection, and legal assistance.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Bugcrowd

Application Security Engineer

Bugcrowd 1K-5K Internet Software & Services

Bugcrowd is seeking an Application Security Engineer to triage and validate vulnerability submissions across client bug bounty programs, communicate with researchers and customers, and escalate critical security incidents.

Brazil Full-time Mid Level Application Security Engineer
Burp Suite Nmap
1 week ago
Alphasense

Senior Product Security Engineer

Alphasense 51-250 Industrial Conglomerates

AlphaSense is seeking a Senior Product Security Engineer to secure its AI-native market intelligence platform by embedding AI/ML security, secure architecture, and assurance practices throughout product development.

Canada Full-time Senior Application Security Engineer
$118k-$162k
CI/CD DevSecOps Java JavaScript Kubernetes OpenID Connect Python SAML Secrets Management TLS
1 week ago
Alphasense

Senior Product Security Engineer

Alphasense 51-250 Industrial Conglomerates

AlphaSense is seeking a Senior Product Security Engineer to secure its AI-native platform by embedding AI, application, cloud, and customer assurance controls throughout the product lifecycle.

United Kingdom Full-time Senior Application Security Engineer
$114k-$155k
CI/CD DevSecOps Encryption Java JavaScript Kubernetes OpenID Connect Python SAML Secrets Management TLS
1 week ago
Alphasense

Senior Product Security Engineer

Alphasense 51-250 Industrial Conglomerates

AlphaSense is seeking a Senior Product Security Engineer to secure its AI-native market intelligence platform by embedding AI, application, cloud, and customer assurance security throughout the product lifecycle.

Ireland Full-time Senior Application Security Engineer
$111k-$152k
CI/CD DevSecOps Encryption Java JavaScript Kubernetes OpenID Connect Python SAML Secrets Management TLS
1 week ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers