Senior Application Security Engineer

Responsibilities

• Penetrate the web application, APIs, infrastructure, Android application, and iOS application.
• Perform authorization, exploitability, cloud, and identity-focused offensive security assessments.
• Conduct purple-team exercises with Detection & Response and help build detections from offensive tradecraft.
• Develop and maintain offensive tooling and repeatable testing playbooks, including support for phishing and social-engineering assessments.
• Document findings with reproducible proofs of concept, risk ratings, and actionable remediation guidance.

Requirements

• Have 4+ years of experience working as an Application or Product Security Engineer.
• Have penetration-testing experience across web, API, and mobile targets and extensive experience conducting security assessments.
• Have experience with tools such as Burp Suite.
• Hold a B.A. or B.S. in a relevant field such as Computer Science, Computer Engineering, or Information Security, or have relevant experience.
• Be able to quickly learn modern technology stacks, including Java, Spring, Terraform, and Kubernetes.
• Preferred qualifications include regulated-environment experience, mobile application pentesting using OWASP MASVS, cloud red-team or adversary-emulation experience, and certifications such as OSCP, OSWE, or GXPN.

Benefits

• Hybrid schedule with three days per week onsite in the San Francisco FiDi or Culver City office.
• Salary range of $170,000-$225,000 USD, plus competitive total compensation and a bonus program for eligible roles.
• Premium HMO and PPO healthcare, dental, and vision insurance plans.
• 401(k) savings plan with a 4% match and immediate vesting.
• Sixteen weeks of paid parental leave after one year of employment.
• Professional growth opportunities, an employee mobility program, and an annual learning and development budget.
• Company perks program with discounts on pet insurance, fitness, cell phone plans, travel, and other services.
• Financial guidance program covering debt, spending, saving, planning, and home-purchasing preparedness.
• One month work-from-anywhere policy, except in certain countries.
• Amenity-filled offices in Culver City, San Francisco, and Dallas.