# Application Security Engineer

**Company:** [Vannevar](https://hotfix.jobs/companies/vannevar)
**Location:** Remote
**Role:** Security Engineering
**Salary:** $160k – $210k/yr
**Experience:** 5+ years
**Skills:** SAST, Sca, DAST, Secrets Scanning, Container Security, Infrastructure As Code, CI/CD, Threat Modeling, DevSecOps, GitHub Actions, Python, TypeScript, JavaScript, Nist Risk Management Framework, Llm Security
**Posted:** 2026-09-01

> The Application Security Engineer will embed security practices throughout the SaaS software development lifecycle, including threat modeling, automated testing, vulnerability remediation, and incident response. The role requires 5+ years of application or product security experience and expertise with DevSecOps workflows, web applications, and CI/CD automation.

## Job Description

## Responsibilities
- Implement and deploy SAST, SCA, secrets scanning, DAST, and container/IaC checks in CI/CD pipelines.
- Partner with development teams to conduct threat modeling, review critical pull requests, and promote secure-by-default practices.
- Drive shift-left vulnerability detection and remediation across the software development lifecycle.
- Coordinate with DevOps on application security issues spanning application and infrastructure layers.
- Support product incident response and incorporate lessons learned into code, documentation, and processes.

## Requirements
- 5+ years of application or product security experience.
- Hands-on experience securing web applications and automating application security workflows.
- Familiarity with DevSecOps, container security, and patching.
- Experience with GitHub Actions, Python, and TypeScript/JavaScript.
- Clear, concise communication skills, including the ability to translate security risk for engineers.

## Nice to Have
- Experience securing LLM workflows.
- Experience with the NIST Risk Management Framework.
- Software security experience at a U.S. defense contractor.
- Active security clearance or ability to obtain one.
- Willingness to travel onsite.

## Compensation and Benefits
- Salary: $160,000–$210,000, plus equity and 401(k) match.
- Health, dental, and vision insurance.
- 401(k) matching.
- Mental health benefits.
- Flexible work environment.
- Pet and childcare reimbursement during travel.
- Unlimited PTO.

## Similar jobs

- [Cyber Threat Intel Analyst](https://hotfix.jobs/jobs/56d78636-b895-48d1-a62c-1b5e253d3d78) - Wiz - Washington, DC - $160k – $220k/yr
- [GRC Analyst](https://hotfix.jobs/jobs/8f835d00-9815-44c9-b8f9-d81dcab07741) - Fireworks AI - San Mateo, CA - $160k – $170k/yr
- [Federal Compliance Manager](https://hotfix.jobs/jobs/1e20be75-7d2d-4b41-9067-ffbb919a86a7) - Figma - Remote - $153k – $245k/yr
- [Sensing and Perception System Safety Engineer](https://hotfix.jobs/jobs/6d559fa7-ea8f-41d7-b06f-9dcd21c834ac) - Zoox - Foster City, CA - $170k – $267k/yr
- [Security Engineer](https://hotfix.jobs/jobs/81e148cc-4e02-435e-8a54-df7bf4ca0b66) - Greptile - San Francisco, CA - $170k – $300k/yr

**Apply:** https://hotfix.jobs/jobs/2910e6b0-19a3-46fe-9af2-2fe3f5ea6edf
**Canonical:** https://hotfix.jobs/jobs/2910e6b0-19a3-46fe-9af2-2fe3f5ea6edf