Full Stack Security Engineer – Application & Product

This is a fully remote position, open to applicants in United States.

📋 Description

• Oversee threat modeling, architecture assessments, and code evaluations for our web applications, APIs, and microservices.

• Actively write and commit code to address security vulnerabilities in our Python, Go, and JavaScript/TypeScript codebases in collaboration with the engineering team.

• Implement, fine-tune, and manage security testing tools (SAST, DAST, SCA) within our CI/CD pipelines to identify vulnerabilities early in the software development lifecycle (SDLC).

• Configure and manage application-layer security mechanisms, including Web Application Firewalls (WAF), bot protection, and API gateways.

• Offer security advice, secure coding training, and standard operating procedures to development teams.

• Work closely with operations to ensure product compliance with relevant frameworks (e.g., SOC 2, ISO 27001, GDPR) and participate in bug bounty triage.

⛳️ Requirements

• Minimum of 5 years of experience in application security, product security, or as a software engineer with a strong emphasis on security.

• Proficient programming and code-review capabilities in languages such as Python, Go, JavaScript/TypeScript, or other contemporary stacks.

• In-depth knowledge of web application vulnerabilities (OWASP Top 10), API security (REST/GraphQL), and modern authentication methods (OAuth, OIDC, JWT).

• Practical experience with offensive web security testing tools (e.g., Burp Suite, ZAP).

• Proven experience in building and maintaining automated security pipelines (DevSecOps).

• Ability to convert complex security risks into actionable engineering tasks.

🏝️ Benefits

• Significant equity in a rapidly growing company—everyone on the team receives stock options; your contributions drive our success, and you benefit from the growth.

• Comprehensive medical, dental, and vision plans.

• Flexible PTO—take the time you need to rejuvenate.

• Most positions are remote-first, fostering an inclusive and collaborative environment with Slack as the primary means of internal communication.

• $1,200 Home Office & Equipment Stipend—We equip you for success from day one with the resources and support to create your ideal workspace.