# Staff Application Security Engineer

**Company:** [Upside](https://hotfix.jobs/companies/upside)
**Location:** Remote
**Role:** Security Engineering
**Salary:** $210k – $230k/yr
**Experience:** 6+ years
**Skills:** Application Security, Python, AWS, AWS Lambda, Aws Control Tower, SAST, Sca, Threat Modeling, Terraform, IAM
**Posted:** 2026-02-26

> Staff-level AppSec engineer building secure coding practices and vulnerability management for a commerce platform. Requires 6+ years in application security with deep AWS and Python experience.

## Job Description

## Responsibilities
- Innovate with AI and deliver security solutions to mitigate application vulnerabilities
- Run security code tests (SAST, SCA) and partner with engineers to remediate unsafe code
- Create threat models and engage technology teams to review and document risks
- Guide leadership on security architecture, design and best AppSec practices
- Train and upskill engineers on safe coding and vulnerability management
- Assist penetration testing initiatives and/or help manage bug bounties
- Support administration of AWS Control Tower and IAM provisioning
- Interact with the security community and keep aware of trends

## Requirements
- 6+ years of application or product security inclusive of reviewing Python code
- Experience with innovating and delivering solutions related to vulnerability management
- Deep knowledge of AWS and Lambda security architecture and AWS Control Tower
- Strong understanding and adoption of AI technologies
- Bachelor’s degree in Computer Science or Engineering highly preferred
- Exceptional customer service and people skills

## Tools
- Github Suite (Advanced Security, Actions, Copilot)
- Python
- Terraform
- AWS Lambda, DynamoDB, S3, SNS, SQS, IAM, VPCs
- ChatGPT
- Snowflake
- SQL

## Similar roles

- [Staff Security Engineer, Application Security](https://hotfix.jobs/jobs/5214d92c-70cc-4cb3-aa3a-342e71db7789) - NinjaTrader - Chicago, IL - $210k – $260k/yr
- [Staff AppSec Engineer](https://hotfix.jobs/jobs/276da52a-633e-4899-bbe1-257843a4fa8b) - Upside - Washington, DC - $210k – $230k/yr
- [Staff Corporate Security Engineer](https://hotfix.jobs/jobs/b96b394f-21ee-4d9d-8bd8-4c821ffcef81) - Crusoe - San Francisco, CA - $210k – $255k/yr
- [Senior/Staff Software Systems Engineer](https://hotfix.jobs/jobs/778eda2f-9ba1-4e9e-9093-db9a8854300c) - Zoox - Foster City, CA - $208k – $300k/yr
- [Staff Software Engineer - Trust & Safety](https://hotfix.jobs/jobs/75025b27-cc32-4ffc-9305-540d29ca5599) - Rula - Remote - $207k – $243k/yr

**Apply:** https://hotfix.jobs/jobs/7ac2e48a-851e-4e49-8cb6-83a44f82862c
**Canonical:** https://hotfix.jobs/jobs/7ac2e48a-851e-4e49-8cb6-83a44f82862c