46 application security engineer jobs at 30 companies in Lockport, NY
🚀PromotedHiringCafe
Founding Backend / Infra Engineer
Cupertino, CA, US
$160k-$300k/yrOn-SiteFull Time
HiringCafe: Building a 100× better job search engine to take on Indeed and LinkedIn.
Own the crawlers, pipelines, and infrastructure powering a real-time job search engine. Strong Node.js and Python fundamentals; bonus points for security and reverse-engineering chops.
Clio: Cloud-based legal practice management software and AI solutions.
Experience in application/product security and offensive testing, vulnerability identification and remediation, threat modeling, proficiency in at least one language (Python, .NET, Ruby, JavaScript), cloud security (AWS/Azure/GCP), and common app-security tools.
HelloFreshFrankfurt Stock Exchange: HFG: Global meal kit delivery service and food solutions provider.
2+ YOEProficiency in Python or Go; 2+ years security experience; exposure to Terraform, Docker, container management, CI/CD, and secrets management; experience designing security controls; familiarity with agile, Jira, and Slack.
RobinhoodNASDAQ: HOOD: Provides a commission-free platform for investing and financial services.
5+ YOE5+ years in application security or related field; experience with secure SDLC and threat modeling; production-grade Python/Go experience; collaboration with engineers; reliability and incident response focus.
NasdaqNASDAQ: NDAQ: Operates global electronic marketplaces and provides financial technology services.
10+ YOE10+ years information security experience across on-prem and cloud, bachelor's in CS/IS or equivalent, active security certification (CISSP/CISA/CCSP/GIAC), hands-on app security/testing experience, strong risk communication skills.
ScotiabankToronto Stock Exchange: BNS: Provides global personal, commercial, and investment banking services.
5+ YOE5+ Mgmt5+ years AppSec and DevSecOps experience, expertise with application security tooling, containerization, cloud platforms, CI/CD pipelines, scripting, and strong communication and analytical skills.
Boston or Chicago or Los Angeles or New York or San Francisco or Toronto or Vancouver or Vancouver
$145k-$175k/yrRemoteFull Time
Later: Provides software for social media scheduling and influencer marketing.
5+ YOE5+ years security engineering experience; strong application, cloud, and infrastructure security; SOC 2 and compliance experience; vulnerability management, IaC and CI/CD security; strong communication and software engineering skills.
OWASP, NIST, CIS Controls, SOC 2, ISO 27001, AWS Security Hub, Azure Security Center, GCP Security Command Center, SIEM, SOAR, Terraform, CloudFormation, C#, CI/CD
San Francisco or Toronto or United States or Canada
$180k-$260k/yrHybridFull Time
EvenUp: AI-powered document generation and analysis for personal injury law.
5+ YOE5+ years in security-focused engineering with hands-on architecture, SAST/DAST and CI/CD integration, cloud and application security, experience securing AI systems, strong scripting (Python) and relevant cybersecurity certification.
San Francisco or Palo Alto or Toronto or Los Angeles
OnsiteFull Time
HeyGen: Generate professional AI videos using digital avatars and voices.
Hands-on Python and AWS experience, cloud and application security, vulnerability management, IAM and secrets management, familiarity with SOC 2/ISO 27001, strong communication and threat modeling skills.
Python, AWS, Drata, Infisical, Bugcrowd, SOC 2, ISO 27001
NetSPI: Provides proactive cybersecurity testing solutions and attack surface management.
3+ YOEBachelor's in IT/CS/Engineering/Math (or equiv), 3+ years penetration testing, familiarity with Kali/Burp/Metasploit/Nessus, OWASP and MITRE knowledge, OS internals, strong communication and mentoring skills, willing to travel 5-10%.
Tenzai: Autonomous AI agents for continuous, enterprise-scale penetration testing.
3+ YOE3+ years in FDE/TAM/security consulting or enterprise architecture; strong enterprise infrastructure, hybrid-cloud, network and application security knowledge; familiarity with LLM/GenAI risks; elite communication; willing to travel monthly.
NetSPI: Provides enterprise penetration testing and attack surface management services.
3+ YOEBachelor's (or equivalent) in IT/CS/Engineering/Math, 3+ years penetration testing experience, familiarity with Kali Linux, Burp Suite, Metasploit, Nessus, OWASP Top 10 and MITRE ATT&CK, Windows/Linux/macOS internals, mentoring and QA oversight, willingness to travel 5-10%.
TMX GroupToronto Stock Exchange: X: Operates global financial markets and exchange trading platforms.
7+ YOEPost-secondary degree or diploma in CS/InfoSec, 7+ years in information security with people management experience, deep knowledge of security platforms, application onboarding and enterprise networks, strong communication and leadership skills.
InvestorCOM: Provides regulatory compliance software for wealth and asset managers.
3+ YOE3+ years software development experience; strong C#/.NET, SQL Server, RESTful API, Azure, and Git skills; experience with secure, scalable SaaS applications and Agile practices.
Royal Bank of CanadaTSX: RY: Provides personal, commercial, and investment banking services worldwide.
5+ YOE5+ years developing large enterprise C#/.NET applications, strong SQL Server, REST/Microservices, security, IIS, unit testing, CI/CD and Agile experience; strong communication skills.