Staff AppSec Engineer

Responsibilities

• Own identification and remediation of application vulnerabilities end-to-end
• Leverage AI tools to design and deliver scalable security solutions
• Execute automated security testing (SAST, SCA) and work directly with engineers to resolve findings
• Develop threat models and collaborate with product and engineering teams to surface, document, and prioritize risk
• Advise leadership on security architecture decisions and application security best practices
• Build developer security literacy through training, enablement, and vulnerability management guidance
• Participate in penetration testing efforts and support bug bounty program operations
• Contribute to the administration of AWS Control Tower and IAM provisioning workflows
• Stay current with the broader security community and bring emerging trends back to the team

Requirements

• 6+ years in application security or product security, including hands-on experience reviewing Python code
• Track record of building and delivering solutions in vulnerability management programs
• Deep expertise in AWS security architecture, including Lambda and AWS Control Tower
• Demonstrated experience adopting and integrating AI tools into security or engineering workflows
• Strong communication and collaboration skills

Nice-to-Haves

• Bachelor's degree in Computer Science, Engineering, or a related field preferred

Tools & Technologies

• GitHub Advanced Security, GitHub Actions, GitHub Copilot
• Python
• Terraform
• AWS (Lambda, DynamoDB, S3, SNS, SQS, IAM, VPCs)
• ChatGPT
• Snowflake
• SQL

Compensation & Benefits

• US base salary range: $210,000 - $230,000 + equity + benefits
• Medical, dental, and vision coverage starting on Day 1
• Equity (ISOs)
• 401(k) program
• Family planning programs + paid parental leave
• Physical fitness and wellness memberships
• Emotional and mental health support programs
• Unlimited PTO + 10 paid federal holidays + annual week-long Winter Break
• Flexible work environment
• Lunch reimbursement for in-office employees
• Employee Resource Groups
• Learning and Development stipend