Application Security Engineer

About the Role:

• Partner with Security and Engineering to build a friction-free, developer-centric security program.
• Automate security guardrails, scale the bug bounty program, and foster security champions across a globally distributed team.

What You Bring:

• 3-5+ years of Application Security or full stack development experience with strong Java and Python code assessment skills.
• Deep familiarity with SAST/DAST tools like GitHub Advanced Security, ZAP/BURP, Semgrep, and integrating them into CI/CD.
• Hands-on bug bounty program management and threat modeling experience using frameworks like STRIDE.

How We Work:

• Remote-first philosophy with flexibility for great work-life balance; hybrid schedule if within 30 miles of an office.
• Emphasis on connection, collaboration, and celebrating wins together in person.

Benefits:

• Competitive salary, 401(k) with 4% match, early equity, and stipends for internet, learning, and office setup.
• Comprehensive health and wellness benefits including medical, dental, vision, HSA/FSA, life and disability insurance, and pet insurance.
• Flexible PTO, global parental leave program, and professional development opportunities.