Source Job

$225,400–$281,800/yr
US Unlimited PTO

  • Lead Apollo's multi-year AppSec strategy and shape cross-team roadmaps.
  • Set secure design, code review, and AI security standards across engineering.
  • Mentor security champions and build automation that scales secure practices.

Application Security Penetration Testing Code Review Ruby On Rails AI Security

20 jobs similar to Staff Application Security Engineer

Jobs ranked by similarity.

US 18w maternity 16w paternity

  • Contribute to secure-by-design practices and maturing SAST, SCA, and DAST programs.
  • Develop Secure AI Development Lifecycle and AI-assisted threat modeling framework.
  • Mentor engineers on secure coding and foster cross-functional collaboration.

Spring Health is a global mental health company using an AI-native platform to deliver personalized mental health support. The company reaches over 170 million people worldwide and fosters a culture of innovation, collaboration, and commitment to eliminating barriers to mental health.

$0–$185,800/yr
Global 26w maternity 26w paternity

  • Design and build security solutions across application security, infrastructure, and AI agentic systems.
  • Secure integrations, manage secrets, and review public-facing APIs for vulnerabilities.
  • Develop AI governance standards and security review agents to protect user trust.

Wave builds mobile financial services across Africa, making cash deposits, withdrawals, and payments accessible to millions. With a rapidly growing team in 9 countries and a remote-first culture, Wave fosters autonomy and ownership.

$175,000–$215,000/yr
US 4w PTO 12w maternity 12w paternity

  • Partner with product and engineering teams to embed security across application design and development.
  • Lead threat modeling, secure code reviews, and vulnerability analysis to protect complex systems.
  • Build automated security guardrails and promote secure coding practices throughout the SDLC.

Quanata is building an AI-native insurance technology platform for the State Farm family of companies. It is a remote-first organization that values veteran hiring, professional growth, and a collaborative culture across the U.S.

UK Unlimited PTO

  • Support application security programs including threat modeling and security reviews for web and AI/LLM systems.
  • Triage SCA/SAST/DAST/CSPM findings and coordinate remediation with engineering teams.
  • Develop automation scripts and tools to integrate security solutions and streamline vulnerability management.

G-P is a leading SaaS-based Global Employment Platform that enables companies to expand into over 180 countries without establishing local entities. With a diverse, remote-first culture, G-P empowers its Dream Team with flexibility and resources to foster innovation and growth.

US

  • Own application security across cloud services, APIs, data pipelines, and edge-deployed systems.
  • Lead threat modeling, secure design reviews, and in-depth code reviews to identify and fix vulnerabilities.
  • Build and integrate security tooling like SAST, DAST, SCA, and CodeQL into CI/CD and mature the secure SDLC.

Quartermaster AI leverages cutting-edge AI and robotics to make the ocean a safe and sustainably managed resource. It is a fast-moving, rapidly scaling defense-tech startup with a mission-driven culture and significant autonomy for engineers.

$232,000–$379,000/yr
US 4w PTO 12w maternity 12w paternity

  • Partner with product portfolios to manage product security, emphasizing AI/ML security and cross-functional collaboration.
  • Lead security design reviews, threat modeling, and secure code reviews across web, backend, and API stacks.
  • Integrate AppSec tooling into CI/CD, support secure development practices, and participate in incident response.

Quanata is an insurance technology company building advanced risk prediction and prevention solutions and a full-stack, AI-native insurance platform for State Farm and HiRoad. It is wholly owned by State Farm and fosters an inclusive, positive culture focused on hiring talented people across disciplines.

North America

  • Partner with Fortune 500 customers to address security concerns and accelerate platform adoption.
  • Develop security reference architectures and perform threat modeling for ServiceNow products and AI services.
  • Lead security deep dives covering cloud-native architectures, identity, encryption, and AI security controls.

ServiceNow is an AI platform that helps enterprises automate workflows and reinvent business processes. The company serves 85% of the Fortune 500 and fosters an AI-native culture where technology and talent work together.

US 4w PTO

  • Lead application security protocols throughout the SDLC.
  • Partner with engineering teams to embed security into architecture and development.
  • Perform hands-on security testing of web apps, APIs, and cloud-native services.

K Health is an AI-powered virtual care engine that modernizes the primary care loop using clinical AI and virtual clinics. Founded in 2016 and headquartered in New York City, the company is backed by over $443.5M and aims to build diverse, collaborative teams.

$157,675–$238,500/yr
US

  • Deliver accurate security assessments of software, code, and firmware, evaluating resilience against AI-driven attacks.
  • Build and pressure-test novel AI-enabled security tooling and workflows, then drive adoption across the security org.
  • Partner cross-functionally to define and drive Samsara's medium- and long-term AI security strategy.

Samsara provides a Connected Operations Cloud platform that helps organizations improve safety, efficiency, and sustainability of physical operations. As a publicly traded company, they foster a culture of rapid career development and hyper growth, with a high-caliber team.

  • Own vulnerability management across code, dependencies, images, and cloud config, automating triage and remediation.
  • Build and expand security gates in CI/CD pipelines, define secure cloud baselines, and drive least privilege identity.
  • Partner with DevOps on paved roads for secure-by-default development and lead incident response.

Aegis AI is a startup founded by ex-Google engineers who built Safe Browsing and reCAPTCHA, focused on stopping adversarial AI attacks. The team is flat, flexible, and fast, with engineers owning decisions and clear KPIs.

$182,800–$215,000/yr
US

  • Own and improve the organization's SIEM, including threat detection, alert tuning, and incident response.
  • Conduct security architecture reviews, code reviews, and infrastructure assessments to identify and remediate risks.
  • Build scalable security processes and integrate security practices into development workflows across cloud and container environments.

This company is a fast-moving technology organization focused on building secure and scalable software systems. It fosters a high-ownership, remote-first culture where experienced professionals collaborate with high-caliber engineering teams.

Europe US 6w PTO

  • Conduct threat modeling and risk assessments across product features, AI agents, cloud infrastructure, and data systems to identify vulnerabilities.
  • Partner with engineering, IT, and data teams to embed security into development processes through design reviews and secure coding guidance.
  • Run vulnerability management, bug bounty coordination, incident readiness, and SOC 2 compliance support to build scalable security practices.

n8n is an open workflow orchestration platform for AI-powered automation, combining code freedom with no-code speed. Since 2019, it has grown to 260+ employees across Europe and the US, backed by top investors and a 650,000-developer community.

$175,000–$230,000/yr
North America Unlimited PTO

  • Shape application security practices by integrating automated safeguards throughout the software development lifecycle.
  • Collaborate with Security and Engineering teams to identify vulnerabilities early and manage bug bounty programs.
  • Conduct threat modeling and secure code reviews for Java and Python microservices while fostering developer security ownership.

This partner company protects payment infrastructure and enables secure, scalable digital commerce. It operates as a remote-first, security-focused fintech organization with a fast-moving culture and globally distributed teams.

North America Unlimited PTO

  • Architect and develop secure backend services for Access Security using AI.
  • Collaborate with cross-functional teams to deliver enterprise-ready identity intelligence.
  • Own end-to-end feature delivery and mentor engineers.

ServiceNow is an AI control tower for business reinvention, uniting AI, data, and workflows to help enterprises work smarter. It serves 85% of the Fortune 500 and fosters an AI-native culture where technology and talent are unstoppable.

$175,000–$200,000/yr
US Canada Unlimited PTO

  • Partner with engineering teams on architecture reviews, threat modeling, and secure design to translate risks into practical recommendations.
  • Improve security tooling, strengthen SDLC and CI/CD controls, and serve as a GCP security subject matter expert.
  • Drive vulnerability management, coordinate penetration testing, and enable engineers through documentation and mentorship.

Doppel builds an AI-native platform for social engineering defense, protecting executives, employees, customers, and brands from phishing, impersonation, and fraud across digital channels. Backed by Andreessen Horowitz and Bessemer Venture Partners, it is a rapidly growing Series C startup with a team focused on cybersecurity expertise and startup velocity.

$160,000–$180,000/yr
US Unlimited PTO

  • Own and mature Cleo's SSDLC, including threat modeling, design reviews, and automated security scanning.
  • Run risk-based triage for product vulnerabilities, penetration testing, and the CVE lifecycle.
  • Own product security posture, customer-facing advisories, and secure-by-default configurations.

Cleo provides secure data integration and managed file transfer solutions for enterprise businesses. With over 4,000 clients and a 99% retention rate, the company promotes a supportive, life-work balanced culture.

US

  • Own security solutioning for k0rdent AI across the full stack, from hardware to AI models.
  • Publish reference architectures and proofs of concept with customers and partners.
  • Research emerging threats and present to engineers, executives, and conference audiences.

Mirantis, an IREN company, is the Kubernetes-native AI infrastructure company enabling organizations to build scalable, secure infrastructure for AI and data-intensive applications. It is a distributed, world-class team committed to openness and technical excellence.

$235,000–$305,000/yr
US 4w PTO 12w maternity 12w paternity

  • Lead threat modeling and security architecture for AI-enabled systems, including LLM applications and cloud-native platforms.
  • Define and implement secure engineering patterns and guardrails across AWS infrastructure, CI/CD pipelines, and third-party integrations.
  • Partner with engineering and security teams to embed security throughout the AI product lifecycle and drive cross-functional security initiatives.

Quanata is an insurance technology innovation company that engineers advanced risk prediction and prevention solutions for State Farm and HiRoad. We are a wholly owned subsidiary of State Farm with a remote-first culture that values inclusion and positive team dynamics.

$190,000–$250,000/yr
US Unlimited PTO

  • Educate customers on application security and software supply chain security through engaging demos.
  • Serve as a technical expert on Endor Labs' product suite and shape solutions with engineering.
  • Guide customers through onboarding and adoption to ensure they achieve security and development goals.

Endor Labs provides security solutions for AI-generated code, using a patented code context graph to identify and fix exploitable vulnerabilities. Founded by Varun Badhwar, the company has raised $163M and serves major customers like OpenAI and SpaceX, fostering a mission-driven, collaborative culture.

$140,000–$160,000/yr
US

  • Design and maintain secure architectures across AWS, Azure, and GCP with infrastructure-as-code and policy-as-code enforcement.
  • Secure AI/ML pipelines and LLM applications, addressing OWASP Top 10 for LLMs and implementing guardrails and content-filtering controls.
  • Drive security operations, including SIEM monitoring, incident response, and supporting HIPAA/HITRUST/SOC 2 compliance.

Reveleer delivers a unified platform for risk adjustment, quality improvement, clinical intelligence, and member management for health plans and provider organizations in value-based care. Trusted by 80+ customer organizations nationwide, the company fosters a collaborative, compliance-focused culture with transparent, human-in-the-loop AI at its core.