Staff security engineer, application security

Responsibilities

• Conduct threat modeling with product teams and design secure architectures for new platform features.
• Own and evolve the application security program, including SAST/DAST scanning in CI/CD pipelines, security code reviews, and vulnerability-detection automation.
• Establish secure coding standards, reusable security patterns, and libraries that help developers build securely by default.
• Design security features and products that protect customer environments and partner with engineering teams on secure product decisions.
• Integrate AI agents to improve security-team and engineering-team velocity while proactively reducing risk.
• Lead security assessments and penetration testing of applications, AI services, and APIs, and collaborate on remediation at scale.
• Design security controls for data pipelines, model-training environments, and customer-facing AI agents.
• Research emerging LLM and generative-AI attack vectors and build defenses against novel risks.

Requirements

• At least 4 years of hands-on application security engineering experience securing large-scale production systems.
• Understanding of developer experience and workflows for shipping features while balancing security risk and engineering velocity.
• Technical expertise in at least two of Python, Java, Go, JavaScript, and TypeScript, with the ability to review code across multiple languages.
• Knowledge of SAST/DAST solutions, vulnerability management platforms, security testing frameworks, and DevSecOps practices.
• Strong communication skills for explaining security concepts to technical and non-technical audiences and motivating action.
• A builder’s mindset focused on automation, scalability, and enabling rather than blocking the business.
• Alignment with WRITER’s values of Connect, Challenge, and Own.
• The role is open to mid, senior, and staff-level candidates.

Benefits

• Hybrid work from WRITER’s New York City, San Francisco, or Seattle offices.
• Generous PTO and company holidays.
• Medical, dental, and vision coverage for employees and families.
• Sixteen weeks of paid parental leave for all parents.
• Fertility and family-planning support.
• Early-detection cancer testing through Galleri.
• Flexible spending accounts, dependent-care FSA options, and an HSA with company contribution for eligible plans.
• Annual wellness and learning-and-development stipends.
• Company-wide and team off-sites, company stock options, and a 401(k).