Senior Application Security Engineer

Job Description: - Triage, validate, route, and drive remediation of findings from SAST, DAST, SCA, code review, pentests, and bug bounty

• Build automation to remove manual effort from vulnerability-management workflows
• Set scope for external pentests and bug bounty programs, direct testers, judge severity, and close the loop
• Identify patterns across findings and remove root causes
• Establish secure patterns and defaults
• Write custom static analysis rules for organizational anti-patterns
• Review platform-layer controls including authorization, service identity, secrets handling, and gateway enforcement
• Collaborate with owning engineering teams to close security gaps
• Perform hands-on application and API testing and manual code review of high-exposure services
• Conduct threat modeling for new and high-exposure designs
• Provide security enablement across engineering, including a security champions program

Requirements: - Experience running vulnerability management end to end, and automating it with code against scanner, ticketing, and source-control APIs

• Shipped and maintained real software; able to read unfamiliar code quickly, review it rigorously, and reason about architecture and failure modes
• Ownership of problems through remediation, including fixes dependent on other teams
• Code auditing in at least one of Go, Python, Node.js, Ruby, or Java, with willingness to work in the rest
• Practical command of the OWASP Top 10, with real depth in broken access control and business logic flaws
• Experience with SAST, DAST, and SCA in CI/CD
• Cloud fundamentals on GCP or AWS
• Docker and Kubernetes
• Ability to distinguish real findings from theoretical ones
• Ability to influence asynchronously across time zones without a reporting line
• Advanced offensive certifications such as OSWE, BSCP, CPTS, or CRTO are a bonus

Benefits: - Generous compensation in cash and equity

• Early exercise for all options, including pre-vested
• Work from anywhere: Remote-first Culture
• Flexible paid time off and Year-end break
• Health insurance, dental, and vision coverage for employees and dependents - US and Canada specific
• 4% matching in 401k / RRSP - US and Canada specific
• MacBook Pro delivered to your door
• One-time stipend to set up a home office — desk, chair, screen, etc.
• Monthly meal stipend
• Monthly social meet-up stipend
• Annual health and wellness stipend
• Annual Learning stipend