Staff Security Engineer, Application Security New Chicago or Remote*

Staff Security Engineer, Application Security Chicago or Remote* JOIN US ON OUR MISSION TO BECOME THE #1 RETAIL TRADING PLATFORM IN THE WORLD Welcome to NinjaTrader. We are a trading platform and futures broker focused on empowering traders with innovative tools and services. Since 2003, NinjaTrader has grown to serve over 2 million users and aims to continue evolving the futures industry with real-time support and a community of traders. What you’ll do We are seeking a Staff Security Engineer, Application Security to scale and mature our security program. You will own key security domains end-to-end, collaborate with engineering to ensure systems are secure by design, and drive automation, secure design, and developer enablement. The role is hands-on with emphasis on impactful security improvements and partnering with senior engineers and security leadership to scale security across the organization. In this role you will Own key security domains such as vulnerability management, application security, API security, and supply chain security Drive improvements in security coverage, prioritization, and remediation workflows Partner with engineering teams to integrate security into design reviews, threat modeling, CI/CD pipelines, and developer workflows Provide actionable, pragmatic guidance to help teams ship securely Develop and improve security tooling and automation to reduce manual effort Implement and tune tools for SAST, SCA, DAST, dependency security, and container security Leverage AI/LLMs to improve triage, detection, and review processes Triage and prioritize vulnerabilities using risk-based approaches Partner with teams to ensure timely remediation of critical issues Help define and improve SLAs, metrics, and reporting Conduct threat modeling, design reviews, and security assessments Contribute to incident response and postmortems for security events Identify and help remediate systemic risks What you’ll need 7+ years of experience in Application Security, Product Security, or Security Engineering Hands-on experience with threat modeling and secure design Experience with vulnerability management and application security tooling Experience in cloud-native environments (AWS, GCP) Experience integrating security into CI/CD pipelines and developer workflows Ability to write code in Python, Go, or similar languages for automation and tooling Strong cross-functional collaboration with engineering teams Experience scaling security in a high-growth or late-stage startup Familiarity with AI-driven security workflows or automation Background in API security, data protection, or multi-tenant systems Experience with bug bounty programs and penetration testing Security certifications such as CISSP Compensation The salary range for this role is $210,000.00 - $260,000.00 USD. An annual target bonus of 12% is provided. Bonus is based on individual performance (50%) and company/team performance (50%). Salary and bonus are components of the total compensation package. NinjaTrader offers a 401(k) plan with a 3.5% company match. Annual PTO is 23 days (with some positions potentially more) plus seven paid holidays. Location & Hybrid This role is based in Chicago, IL, with possible remote flexibility for exceptional candidates in select states. For Chicago-based employees, a hybrid schedule is in place: in-office Tuesday through Thursday, with remote work on Mondays and Fridays. Additional benefits include: 20 flex remote days annually 5 Company Wide Office-Optional weeks tied to major holidays Our Core Benefits Include Generous PTO 7 Paid Holidays annually + 5 Conditional Holidays annually 1 Service Day annually 401k with 3.5% company match Life and disability insurance covered 100% by NinjaTrader We are an equal employment opportunity employer. We do not discriminate on the basis of race, color, religion, sex, national origin, sexual orientation, age, disability, or veteran status. #J-18808-Ljbffr NinjaTrader Group