123 application security engineer jobs at 83 companies in New York

PromotedHiringCafe
Founding Backend / Infra Engineer
Cupertino, CA, US
$160k-$300k/yr On-SiteFull Time
HiringCafe
HiringCafe: Building a 100× better job search engine to take on Indeed and LinkedIn.
Own the crawlers, pipelines, and infrastructure powering a real-time job search engine. Strong Node.js and Python fundamentals; bonus points for security and reverse-engineering chops.
Node.js, Python, Elasticsearch, Redis
2d
Save
Mark Applied
Hide
Senior Application Security Engineer
New York, New York, United States
$220k-$235k/yr HybridFull Time
Savvy Wealth
Savvy Wealth: Digital wealth management platform for financial advisors.
5+ YOE5+ years hands-on security engineering with application/product security, strong coding skills, AppSec toolchain experience (secrets, SCA, SAST), cloud (AWS/GCP) and Cloudflare experience, OAuth/SaaS hardening, GitHub/CICD security, and strong communication.
AWS, GCP, Cloudflare, Google Workspace, GitHub, Rippling, Slack, Claude
2mo
Save
Mark Applied
Hide
Staff Application Security Engineer
New York or San Francisco or London
$185k-$260k/yr OnsiteFull Time
Bitwise Asset Management
Bitwise Asset Management: Specialized crypto-focused asset manager and index fund provider.
7+ YOE7+ years in application security, hands-on SAST/DAST, secure SDLC and CI/CD security, dependency and supply-chain security, threat modeling (STRIDE/PASTA), penetration test coordination, secrets management experience.
SAST, DAST, CI/CD, Socket.dev, HashiCorp Vault, AWS Secrets Manager, STRIDE, PASTA
1mo
Save
Mark Applied
Hide
Senior Application Security Engineer
New York or Los Angeles or San Francisco
$165k-$190k/yr HybridFull Time
Tatari
Tatari: A platform for buying and measuring TV advertising campaigns.
Production Python experience, significant hands-on application security experience, threat modeling, building security tooling/automation, familiarity with AWS and Kubernetes, and SAST/DAST/SCA/CI-CD integration.
Python, Java, Rust, AWS, Kubernetes, OWASP Top 10, API Security Top 10, ASVS, SPVS, AISVS, SAST, DAST, SCA, CI/CD
2w
Save
Mark Applied
Hide
Staff Security Engineer, Application Security
Chicago or California or Colorado or Florida or Georgia or Illinois or Indiana or Minnesota or Missouri or Montana or New Jersey or New York or North Carolina or Ohio or Oregon or Pennsylvania or South Carolina or Texas or Utah or Vermont or Virginia or Washington or Washington or Wisconsin
$210k-$260k/yr HybridFull Time
NinjaTrader
NinjaTrader: Provides futures brokerage services and a trading software platform.
7+ YOE7+ years in application/product/security engineering; hands-on threat modeling, vulnerability management, secure design, CI/CD integration, automation using Python/Go; experience with cloud-native AWS/GCP environments.
AWS, GCP, Python, Go, SAST, SCA, DAST, CI/CD, AI/LLMs
1mo
Save
Mark Applied
Hide
Security Engineer, Application Security
New York City or United States
$100k-$200k/yr RemoteFull Time
Trail of Bits
Trail of Bits: Provides high-end security research and software auditing services.
Experience conducting low-level application and binary security assessments, manual code review, static/dynamic analysis, tool development, architecture review and threat modeling; programming proficiency in two+ listed languages; strong technical communication.
Rust, Golang, Kotlin, Swift, Objective-C, JavaScript, TypeScript, Python, Ruby, C, C++, AWS, GCP, Azure
1mo
Save
Mark Applied
Hide
Senior Application Security Engineer
United States or Canada or San Francisco or New York City or Seattle
$190k-$273k/yr RemoteFull Time
Apollo.io
Apollo.io: AI-powered platform for B2B sales intelligence and outreach automation.
5+ YOE5+ years software engineering or application security experience; strong coding skills (Ruby, Python), Linux and GCP familiarity, deep AppSec/vulnerability management, pen-testing and SAST experience, AI security, and strong communication.
Ruby, Python, Linux, GCP, SAST
2d
Save
Mark Applied
Hide
Staff Application Security Engineer
New York or Miami or United States
$168k-$240k/yr HybridFull Time
Gemini
GeminiNasdaq: GEMI: Regulated platform for trading and storing digital assets.
7+ YOEExpertise in threat modeling, secure design/code review, penetration testing, application security controls, familiarity with regulated environments, strong communication, and experience building AI security tooling.
Scala, Java, Go, Python, SLSA, OWASP SPVS, CI/CD
2mo
Save
Mark Applied
Hide
Lead Application Security Engineer
New York, New York, United States
$190k-$250k/yr OnsiteFull Time
Apollo Global Management
Apollo Global ManagementNYSE: APO: Global alternative asset manager providing investment and retirement solutions.
10+ YOE10+ years in application security; strong software development background; experience with SCA/SAST/DAST, secure SDLC; familiarity with cloud, leading security standards; CISSP/CSSLP etc preferred.
SCA, SAST, DAST, Snyk, GitHub, Burp Suite
1w
Save
Mark Applied
Hide
Staff+ Application Security Engineer - M&A
San Francisco or Seattle or New York City
$320k-$485k/yr HybridFull Time
Anthropic
Anthropic: Developing safe and reliable artificial intelligence systems.
Hands-on application and infrastructure security experience, production-quality coding in Python/Go/Rust/TypeScript, threat-modeling, vulnerability ID, clear communication, and ability to assess unfamiliar codebases under time pressure.
Python, Go, Rust, TypeScript, Claude, SAST, DAST, LLMs, bug bounty
1mo
Save
Mark Applied
Hide
Staff Application Security Engineer
San Francisco or New York City or Pittsburgh
$228k-$290k/yr HybridFull Time
Abridge
Abridge: Automates medical documentation through AI-powered speech analysis
10+ YOE10+ years in application security, expertise in threat modeling, secure code review, vulnerability management, incident response, programming (Python, NextJS), cloud security (GCP), Kubernetes, and AI/ML security; strong communication and leadership skills.
Python, NextJS, GCP, Kubernetes
4w
Save
Mark Applied
Hide
Senior Application Security Engineer
Seattle or Los Angeles or San Francisco or California or Colorado or Connecticut or Delaware or Hawaii or Illinois or Maine or Maryland or Massachusetts or Minnesota or Nevada or New Jersey or New York or Rhode Island or Virginia or Washington or Washington DC or United States
$141k-$259k/yr OnsiteFull Time
Nordstrom
Nordstrom: Operates luxury department stores and off-price retail outlets.
4+ YOE4+ years in application security or related field; experience shipping security tooling and automation; expert threat modeling, security design review, and manual code review; fluent reading/writing code in Java, Kotlin, C#, or Python; cloud-native and LLM/AI security knowledge.
Java, Kotlin, C#, Python, SAST, SCA, DAST, secrets scanning, GitHub Advanced Security, JFrog Artifactory, AWS, GCP, Azure, Kubernetes, LLM
3mo
Save
Mark Applied
Hide
Security Engineer, Application Security
San Francisco or New York City or London
$130k-$500k/yr OnsiteFull Time
Mercor
Mercor: Connecting expert human intelligence with frontier AI model development.
5+ YOEFive+ years of professional experience in application security or security engineering; strong web security knowledge; proficient in at least one of Python, TypeScript, or Go; experience with SAST/DAST tooling and vulnerability management.
Python, TypeScript, Go, Semgrep, CodeQL, Snyk, Burp
3w
Save
Mark Applied
Hide
Application Security Engineer
Research Triangle Park or San Jose or New York City or New York or Washington or Canada
$167k-$211k/yr HybridFull Time
Cisco
CiscoNASDAQ: CSCO: Develops and sells networking hardware and cybersecurity software.
1+ YOEAdvanced AI research experience applied to networking/security or related computer science areas; ability to design and run experiments, build and evaluate models, and communicate research to cross-functional teams.
2mo
Save
Mark Applied
Hide
Security engineer, application security
San Francisco or New York City
$119k-$210k/yr HybridFull Time
Writer
Writer: Platform for building and deploying enterprise generative AI agents.
4+ YOE4+ years in application security; strong coding in Python/Java/Go/JavaScript/TypeScript; SAST/DAST in CI/CD; threat modeling; secure SDLC; security reviews; automation.
Python, Java, Go, JavaScript, TypeScript, SAST, DAST, CI/CD, DevSecOps
3w
Save
Mark Applied
Hide
Application Security Engineer, AWS Security
New York, New York, United States
$153k-$208k/yr OnsiteFull Time
Amazon
AmazonNASDAQ: AMZN: Global online retail and cloud computing technology provider.
2+ YOE2+ years IT security experience or bachelor's in computer science; knowledge of system vulnerabilities, penetration testing, web protocols, secure coding, identity management, and strong communication and troubleshooting skills.
AWS, C++, HTTP, IPsec, Java, Perl, Python, REST, SOAP, TCP/IP, UDP, WSDL, XSD
8h
Save
Mark Applied
Hide
Application Security Engineer / Architect (DevSecOps)
New York City, New York, United States
$175k-$210k/yr HybridFull Time
Clear Street
Clear Street: Cloud-native capital markets platform for institutional trading and clearing.
7+ YOE7+ years in DevSecOps/application or cloud security, hands-on CI/CD and cloud experience, SAST/DAST/SCA tool use, container/Kubernetes security, scripting and IaC familiarity, strong communication.
GitHub Actions, GitLab CI, Jenkins, AWS, Azure, GCP, Semgrep, Snyk, Checkmarx, Veracode, Kubernetes, Python, Bash, Terraform, CloudFormation, Pulumi, OPA/Rego, Checkov, OWASP Top 10, CWE
3mo
Save
Mark Applied
Hide
Staff Application Security Engineer
Boston or New York
$234k-$300k/yr HybridFull Time
Datadog
DatadogNASDAQ: DDOG: Observability and security platform for cloud applications and infrastructure.
Software engineering background with hands-on code review; knowledge of OWASP Top 10, SAST/DAST, API security; able to mentor engineers and define secure-by-default solutions.
Go, Python, Rust, OWASP, SAST, DAST, API security, APM, CI/CD
2mo
Save
Mark Applied
Hide
Senior Security Engineer, Application Security
Bellevue or Menlo Park or New York or Toronto
$146k-$220k/yr HybridFull Time
Robinhood
RobinhoodNASDAQ: HOOD: Provides a commission-free platform for investing and financial services.
5+ YOE5+ years in application security or related field; experience with secure SDLC and threat modeling; production-grade Python/Go experience; collaboration with engineers; reliability and incident response focus.
Python, Go
2mo
Save
Mark Applied
Hide
Senior Security Engineer - Application Security
New York, New York, United States
$150k-$185k/yr HybridFull Time
K Health
K Health: Provides AI-powered virtual primary care and clinical diagnostic tools.
5+ YOE5+ years in information, cloud, IT, or application security with experience building security programs and policies.
Datadog, Sumologic, Torq, flare.io, Google Cloud Platform, Entitle, Okta, Orca Security, FlowSec, Prisma
3w
Save
Mark Applied
Hide
Security Engineer — Application Security & Identity
Boston or Carmel or Chicago or Lambertville or New York City or San Francisco or United States
$60k-$80k/yr HybridFull Time
Real Chemistry
Real Chemistry: Provides marketing and communication services for healthcare companies.
5+ YOE5+ years cloud security experience (3+ in high-growth acceptable), including 2 years focused on application security; hands-on with AWS IAM, SAML/OIDC, GitHub security tooling, threat modeling, penetration testing, and familiarity with SOC 2/GDPR/HIPAA-adjacent controls.
AWS, AWS IAM, Microsoft Entra ID, SAML, OIDC, GitHub, GitHub OIDC, GitHub Advanced Security, CodeQL, SAST, Dependabot, Secret scanning, Semgrep, Snyk, Trivy, ECR scanning, OPA, Sentinel, tfsec, SIEM

Explore Jobs

Expand Your Job Search