Security engineer, application security

Responsibilities

• Conduct threat modeling with product teams and design secure architectures for new features.
• Own and evolve the application security program, including SAST/DAST scanning in CI/CD pipelines, security code reviews, and vulnerability-detection automation.
• Establish secure coding standards and create reusable security patterns and libraries for engineering teams.
• Design security features and products that protect customer environments.
• Integrate AI agents to increase security-team and engineering-organization velocity and proactively minimize risk.
• Lead security assessments and penetration testing of applications, AI services, and APIs, and collaborate on remediation.
• Design and implement controls for data pipelines, model-training environments, and customer-facing AI agents.
• Research emerging AI/ML and LLM security threats and build defenses against novel risks.

Requirements

• At least 4 years of hands-on application security engineering experience securing large-scale production systems.
• Understanding of developer experience and workflows for shipping products while reducing security risk.
• Technical expertise in at least two of Python, Java, Go, JavaScript, and TypeScript, with the ability to review code across multiple languages.
• Knowledge of SAST/DAST solutions, vulnerability-management platforms, security-testing frameworks, and DevSecOps practices.
• Strong communication skills for explaining security concepts to technical and non-technical audiences.
• A builder’s mindset focused on automation, scalability, developer enablement, and business-aligned security.
• Alignment with WRITER’s Connect, Challenge, and Own values.
• The role is open to mid, senior, and staff-level candidates.

Benefits

• Hybrid work from the New York City, San Francisco, or Seattle offices.
• Generous paid time off and company holidays.
• Medical, dental, and vision coverage for employees and families.
• Sixteen weeks of paid parental leave for all parents.
• Fertility and family-planning support.
• Early-detection cancer testing through Galleri.
• Flexible spending and dependent-care FSA options.
• Health savings account with company contribution for eligible plans.
• Annual wellness and learning-and-development stipends.
• Company-wide and team off-sites.
• Company stock options and 401(k).