Lead application security reviews, threat modeling sessions, and secure code review for new features and significant product changes.
Operate and continuously improve SAST, DAST, and SCA tooling; triage and prioritize findings in partnership with engineering teams to harden the codebase.
Plan and execute internal penetration tests against web applications, APIs, and mobile clients; coordinate and support third-party assessments.

Who You Are:

5+ years of experience in application security, with hands-on proficiency in secure development lifecycle practices and offensive testing.
Strong understanding of web application and API security fundamentals (OWASP, MITRE, CIS, API-specific attack surfaces).
Fluency in scripting or development languages (Python, JavaScript, Go, Ruby, or similar) sufficient to review code and write internal tooling.

What We Offer:

Comprehensive Medical, Dental and Vision plans starting day 1.
401(k) plan with a match, 10 paid holidays, 20 vacation days, and 5 sick days.
Paid Family Leave and quarterly self-care stipends.

ButterflyMX

ButterflyMX empowers people to automate property access, operations, and security from a single platform, serving over 20,000 properties worldwide. As a distributed, primarily remote workforce, they seek intelligent, passionate, and collaborative individuals driven by a shared commitment to excellence and innovation.

Apply for This Position