Application Security Engineer

Responsibilities: Run in-depthcode reviewsandstatic analysisto find and address vulnerabilities in financial applications Create and implementsecure coding guidelinesand best practices for development teams Partner with engineering teams to embed security practices intoCI/CD pipelines Leadthreat modelingandrisk assessmentsfor payments, wallets, ledgers, and related surfaces Develop mitigation strategies forfraud , abuse, and unauthorized movement offundsorcredits Ownvulnerability trackingandremediation, including guidance to development teams Manage thebug bounty program : intake, triage, researcher communication, and coordinated disclosure Supportapplication security incident responseactivities Monitor emerging threats targetingfinancialandcloud-nativesystems and strengthen controls continuously Evaluate and securesoftware supply chains, including creating and maintaining Software Bills of Materials (SBOMs) Design and implementagenticandLLM-basedsolutions to detect, investigate, or prevent security issues

Requirements: Bachelor’s degreein Computer Science, Cybersecurity, or a related field 3-5 yearsof experience in application security with a strong focus on code security practices Experience inpayments, money transmission, digital wallets, or related financial platforms Deep understanding ofsecure coding, application security frameworks, and common vulnerabilities (e.g., OWASP Top 10 ) Proficiency inPythonorRustand secure coding practices in these languages Experience securingCI/CD pipelinesand implementing DevSecOps Familiarity withsoftware supply chain securityandSBOMgeneration tools Experience with security testing tools (e.g., Burp Suite , OWASP ZAP ) and static/dynamic analysis Experience securingpayments, wallets, ledgers, or other high-value transaction systems, including controls against fraud, abuse, and integrity issues Experience designing and implementingagenticandLLM-basedsolutions for security problems Excellent communicationskills for explaining complex security topics to technical and non-technical audiences Technologies Python, Rust OWASP Top 10 Burp Suite, OWASP ZAP Software Bills of Materials (SBOMs) DevSecOps, CI/CD pipelines agentic solutions, LLM-based solutions GitOps infrastructure-as-code

Benefits: Equity Comprehensive medical, vision, and dental coverage Access to a401(k)retirement plan Short & long-term disability insurance Life insurance Various other discounts and perks

Preferred Skills and Experience: Hands-on experience securing applications onAWS(familiarity with other cloud platforms is a plus) Relevant security certifications (e.g., BSCP , OSCP , OSWE ) Experience managingbug bounty programs Background indata privacyand compliance relevant to financial products and cloud-native applications Experience with GitOpsandinfrastructure-as-codesecurity Experience building custom security tooling to enhance and automate security processes Contributions to open-source security projects or tools Compensation $100,000 - $258,000 USDper year Base salary is part of a total rewards package that includes equity, comprehensive medical, vision, and dental coverage, access to a 401(k), short & long-term disability insurance, life insurance, and various other discounts and perksITAR Requirements To conform to U.S. Government export regulations, applicant must be a (i) U.S. citizen or national, (ii) U.S. lawful, permanent resident (green card holder), (iii) Refugee under 8 U.S.C. § 1157, or (iv) Asylee under 8 U.S.C. § 1158, or be eligible to obtain the required authorizations from the U.S. Department of State. Learn more about the ITAR here