HiringCafe
Join our community

350 application security jobs at 229 companies in California

2w
Save
Mark Applied
Hide
Application Security Engineer
San Francisco, California, United States
$145k-$180k/yr HybridFull Time
HeartFlow
HeartFlowNASDAQ: HTFL: Provides AI-driven non-invasive cardiac diagnostic software and analysis.
5+ YOE5+ years experience, ≥1 year in application security or security work in development; BS or equivalent/certifications; experience with secure SDLC, threat modeling, SAST/DAST/SCA, and vulnerability management.
C++, Python, Claude Code, GitHub Copilot, SAST, DAST, SCA, CI/CD, AWS, Terraform, Chef, Ansible, Docker, Kubernetes, GitHub Actions
Job PostingView all
2mo
Save
Mark Applied
Hide
Application Security Engineer
San Francisco, California, United States
HybridFull Time
Opal Security
Opal Security: Provides intelligent identity governance and enterprise access management solutions.
4+ YOE4+ years in application security or software security engineering; writing production code; strong auth: OAuth 2.0, OIDC, SAML; experience with AWS and containers; Go/TypeScript; security tooling; incident response.
Go, TypeScript, React, PostgreSQL, Redis, GraphQL, AWS, Kubernetes, Docker
Job PostingView all
2mo
Save
Mark Applied
Hide
Lead Application Security Engineer
San Francisco, California, United States
$225k-$400k/yr OnsiteFull Time
Ivo
Ivo: AI-powered contract review and intelligence platform for legal teams.
4+ YOE5+ years in application security; hands-on web pen testing; TypeScript/Node and Python; cloud security in GCP/Azure; manage pen tests; secure coding; strong communication.
SAST, DAST, SCA, IaC scanning, secrets detection, OWASP, Firebase Auth, WorkOS, SAML, OAuth, SSO, RBAC, Kubernetes security, cloud security
Job PostingView all
2mo
Save
Mark Applied
Hide
AI Application Security Engineer
San Francisco, California, United States
HybridFull Time
Brain Co.
Brain Co.: Builds AI software platforms for governments and large enterprises.
5+ YOE5+ years in application or product security; hands-on security tooling and coding; strong knowledge of application security fundamentals; experience with AI-enabled security.
Python, Go, TypeScript, SAST/DAST tooling
Job PostingView all
3w
Save
Mark Applied
Hide
Principal Application Security Engineer
California, United States
$177k-$225k/yr RemoteFull Time
iHerb
iHerb: Global e-commerce retailer of health and wellness products.
8+ YOE8+ years technical security leadership, SDL and automation experience, strong application/cloud security knowledge, proficiency with threat modeling and security tooling, degree or equivalent experience.
DAST, SAST, SCA, Cloudflare, AWS VPCs, EC2, docker, Python, C# .NET, JavaScript, node.js, Java
Job PostingView all
2w
Save
Mark Applied
Hide
Lead Application Security Engineer
San Francisco, California, United States
$140k-$180k/yr RemoteFull Time
Zeta Global
Zeta GlobalNYSE: ZETA: Provides an AI-powered marketing platform for enterprise customer engagement.
5+ YOEBachelor's or equivalent,5+ years application security experience,knowledge of OWASP and threat modeling,AI/ML security familiarity,cloud and container experience,experience with security automation and tooling.
React, Node.js, Django, FastAPI, OAuth2, OIDC, JWT, AWS, GCP, Azure, Docker, Kubernetes, Semgrep, SonarQube, Burp Suite, OWASP ZAP, Trivy, Snyk, GitHub Advanced Security
Job PostingView all
1mo
Save
Mark Applied
Hide
Staff Application Security Engineer
San Francisco or New York City or Pittsburgh
$228k-$290k/yr HybridFull Time
Abridge
Abridge: Automates medical documentation through AI-powered speech analysis
10+ YOE10+ years in application security, expertise in threat modeling, secure code review, vulnerability management, incident response, programming (Python, NextJS), cloud security (GCP), Kubernetes, and AI/ML security; strong communication and leadership skills.
Python, NextJS, GCP, Kubernetes
Job PostingView all
1mo
Save
Mark Applied
Hide
Senior Application Security Engineer
Los Angeles or New York or San Francisco
$165k-$190k/yr HybridFull Time
Tatari
Tatari: A platform for buying and measuring TV advertising campaigns.
Production Python experience, strong hands-on application security (SAST/DAST/SCA), threat modeling, CI/CD automation, container/AWS/Kubernetes security, API security, and LLM risk mitigation.
Python, Java, Rust, AWS, Kubernetes, CI/CD, SAST, DAST, SCA, OWASP Top 10, API Security Top 10, ASVS, SPVS, AISVS, LLM
Job PostingView all
1w
Save
Mark Applied
Hide
Lead Architect – Application Security
San Jose or Seattle
$298k-$446k/yr HybridFull Time
F5
F5NASDAQ: FFIV: Provides application delivery networking and multi-cloud security solutions.
20+ YOE20+ years in software/security architecture with 10+ years in application-layer security (WAAP, DDoS, API security, bot protection); deep protocol, TLS, identity, zero-trust, and cloud-native expertise.
HTTP/2, HTTP/3, WebSockets, gRPC, TLS, OAuth2, OIDC, SAML, Kubernetes, Istio, Envoy, MITRE ATT&CK, OWASP Top 10
Job PostingView all
1mo
Save
Mark Applied
Hide
Senior Application Security Engineer
San Jose, California, United States
$100k-$150k/yr HybridFull Time
Credo Semiconductor
Credo SemiconductorNASDAQ: CRDO: Designing high-speed semiconductor connectivity solutions for data infrastructure.
5+ YOE5+ years application/product security; 3+ years Secure SDLC leadership; expertise in secure coding, threat modeling, code review, vulnerability management; proficiency in C, C++, Python; DevSecOps and CI/CD automation.
C, C++, Python, GitHub, GitLab, CI/CD, SAST, DAST, SCA, Secrets Scanning, Container Security, PILOT, AWS, Azure, GCP, STRIDE, NIST SSDF, NIST CSF, CIS Controls, ISO 27001
Job PostingView all
1mo
Save
Mark Applied
Hide
Staff Application Security Engineer
San Francisco or United States
$240k-$300k/yr HybridFull Time
Brex
Brex: Corporate cards and spend management software for businesses.
8+ YOE8+ years in application/product security or related software engineering; technical leadership and mentorship experience; expertise in AI security, threat modeling, cloud-native container security (AWS, Kubernetes); proficiency in Python/Go; strong communication skills.
Python, Go, Kotlin, gRPC, GraphQL, Kubernetes, AWS, LLM
Job PostingView all
2w
Save
Mark Applied
Hide
Staff Application Security Engineer
Palo Alto, California, United States
$220k-$270k/yr HybridFull Time
Nclusion
Nclusion: Provides digital banking and payment infrastructure for unbanked populations.
10+ YOE10+ years in software or application security; strong programming in Go, Python, Java, TypeScript, or C++; experience with Kubernetes, Terraform, threat modeling, API security, IAM concepts, and secure CI/CD; pragmatic balance of developer productivity and risk.
Go, Python, Java, TypeScript, C++, Kubernetes, Terraform, SAST, DAST
Job PostingView all
1mo
Save
Mark Applied
Hide
Senior Application Security Engineer
Seattle or Los Angeles or San Francisco or California or Colorado or Connecticut or Delaware or Hawaii or Illinois or Maine or Maryland or Massachusetts or Minnesota or Nevada or New Jersey or New York or Rhode Island or Virginia or Washington or Washington DC or United States
$141k-$259k/yr OnsiteFull Time
Nordstrom
Nordstrom: Operates luxury department stores and off-price retail outlets.
4+ YOE4+ years in application security or related field; experience shipping security tooling and automation; expert threat modeling, security design review, and manual code review; fluent reading/writing code in Java, Kotlin, C#, or Python; cloud-native and LLM/AI security knowledge.
Java, Kotlin, C#, Python, SAST, SCA, DAST, secrets scanning, GitHub Advanced Security, JFrog Artifactory, AWS, GCP, Azure, Kubernetes, LLM
Job PostingView all
1w
Save
Mark Applied
Hide
Sr Application Security Engineer
Bellevue or Ventura
$114k-$208k/yr OnsiteFull Time
The Trade Desk
The Trade DeskNASDAQ: TTD: Cloud-based programmatic advertising platform for data-driven media buying.
6+ YOE6+ years application security experience, software development skills (C#, Java, Python, Go, JavaScript), SAST/DAST/SCA and CI/CD integration, Kubernetes and cloud security, threat modeling, vulnerability management, and AI/ML security experience.
C#, Java, JavaScript, Python, Go, SAST, DAST, SCA, secrets management, GitHub Actions, GitLab, Jenkins, ArgoCD, STRIDE, PASTA, Kubernetes, Docker, Helm, Istio, AWS, GCP, Azure, LLM
Job PostingView all
2mo
Save
Mark Applied
Hide
Sr. Application Security Engineer
Redlands, California, United States
$94k-$158k/yr OnsiteFull Time
Esri
Esri: Developing software for digital mapping and spatial data analysis.
5+ YOE5+ years in application security; experience with code reviews, pen testing, and vulnerability remediation; automation in Python/Typescript/Java/PowerShell; GitHub Actions; Kubernetes security; AWS/Azure; US security clearance potential; Bachelor’s in CS or related field.
Python, Typescript, Java, PowerShell, GitHub Actions, Kubernetes, AWS, Azure, OAuth, OIDC, REST, SQL, C#, Bash/Shell, JavaScript
Job PostingView all
2d
Save
Mark Applied
Hide
Senior Application Security Engineer
Irvine or North Chicago
$110k-$209k/yr HybridFull Time
AbbVie
AbbVieNYSE: ABBV: Develops and sells innovative pharmaceutical and biopharmaceutical medicines.
5+ YOEExperience in application security, implementing and supporting SAST/DAST/IAST/SCA, CI/CD integration, cloud (AWS/Azure), IaC (Terraform/CloudFormation); strong secure coding knowledge (Java, Node.js); effective communicator.
SAST, DAST, IAST, SCA, CI/CD, AWS, Azure, Terraform, CloudFormation, Snyk, Endor Labs, Python
Job PostingView all
2mo
Save
Mark Applied
Hide
Lead Application Security Engineer
San Mateo, California, United States
$195k-$300k/yr HybridFull Time
Eve
Eve: AI-powered legal platform for plaintiff law firm case workflows.
5+ YOE5+ years in application security; coding in multiple languages; cloud security (AWS); IAM; AI security; roadmap ownership; pragmatic security for product velocity.
AWS, Kubernetes, GCP, TypeScript, Python, Go, OAuth, OIDC, SAML, RBAC, ABAC, CI/CD, Threat Modeling, Vulnerability Scanning
Job PostingView all
1mo
Save
Mark Applied
Hide
Senior Application Security Engineer
United States or Canada or San Francisco or New York City or Seattle
$190k-$273k/yr RemoteFull Time
Apollo.io
Apollo.io: AI-powered platform for B2B sales intelligence and outreach automation.
5+ YOE5+ years software engineering or application security experience; strong coding skills (Ruby, Python), Linux and GCP familiarity, deep AppSec/vulnerability management, pen-testing and SAST experience, AI security, and strong communication.
Ruby, Python, Linux, GCP, SAST
Job PostingView all
3w
Save
Mark Applied
Hide
Senior Security Application Engineer
Palo Alto, California, United States
$200k-$235k/yr OnsiteFull Time
BitGo
BitGoNYSE: BTGO: Provides secure infrastructure for institutional digital asset management.
8+ YOE8+ years building and scaling application security programs for FinTech/Web3; strong engineering background in distributed systems, Python or Java, Kubernetes, AWS, Terraform; experience with SAST/DAST, CI/CD security automation, KMS/encryption, SOC 2/GDPR controls, and securing AI/ML lifecycles.
SAST, DAST, CI/CD, Terraform, Kubernetes, AWS, Python, Java, KMS, MLOps, LLM
Job PostingView all
1mo
Save
Mark Applied
Hide
Staff II - Application Security Engineer
Atlanta or Mountain View
$220k-$270k/yr HybridFull Time
Omnissa
Omnissa: Provides AI-driven digital workspace and endpoint management software solutions.
12+ YOE12+ years application security experience; expertise in threat modeling, secure design and architecture for cloud-native systems; proficiency reading Java and C++; experience with code review, vulnerability research, and maturing security programs.
Java, C++, CodeQL
Job PostingView all

Explore Jobs

Expand Your Job Search