Senior Application Security Engineer

This is a fully remote position, open to applicants anywhere in the world.

📋 Description

• Conduct security evaluations for applications, including threat modeling, code reviews, and risk assessments for new features and significant product alterations within Monarch's Django/Python environment.

• Enhance and execute SAST/DAST processes, which involve the triage, validation, and tracking of remediation efforts for findings in CI/CD pipelines.

• Address the vulnerability backlog with urgency, maintaining triage standards, tracking remediation, and establishing escalation paths in collaboration with engineering teams.

• Carry out and oversee penetration testing and security evaluations of Monarch's web and API surfaces.

• Apply and refine AI security review methodologies for features integrated with LLMs and agentic attack surfaces, addressing concerns such as prompt injection, data leakage, model misuse, and supply chain vulnerabilities.

• Develop and sustain security automations and AI-driven tools, while establishing and evaluating security requirements for AI workflows and agentic systems.

• Engage in the weekly security on-call rotation.

⛳️ Requirements

• Over 5 years of experience in security engineering, with proven expertise in Application and AI security, including threat modeling, SAST/DAST, secure code review, and vulnerability management.

• Proficient in Python with a solid understanding of web application security, including OWASP Top 10, API security, and authentication/authorization patterns.

• Practical experience with application security tools such as Semgrep, Burp Suite, Nuclei, or similar alternatives.

• Familiarity with AI/ML security threats, including prompt injection, model misuse, agentic attack surfaces, or LLM supply chain concerns.

• Transformative AI fluency, actively utilizing AI tools to enhance security tasks and create automation.

🏝️ Benefits

• Work from anywhere you choose! As a fully remote organization without a central office, we encourage you to work in the environment where you feel happiest and most efficient, whether that's at home, in a co-working space, or another location.

• Competitive cash and equity compensation in a rapidly growing, early-stage company 🚀.

• A stipend to create your ideal working setup.

• Comprehensive employee benefit plans tailored to your location (for example, in the US, we provide medical, dental, vision benefits, and the option to contribute to a 401k plan).

• Unlimited paid time off (PTO).

• Enjoy a 3-day weekend every month! We take off the “First Friday” of each month to prioritize rest, recovery, or simply having fun!