Boston or New York City or Los Angeles or San Francisco
$230k-$330k/yrOnsiteFull Time
Suno: AI platform for creating full songs from text prompts.
6+ YOE6+ years in security engineering with hands-on application security, secure SDLC tooling, AWS experience, ability to write production code and threat-model AI/LLM surfaces.
Tatari: A platform for buying and measuring TV advertising campaigns.
Production Python experience, significant hands-on application security experience, threat modeling, building security tooling/automation, familiarity with AWS and Kubernetes, and SAST/DAST/SCA/CI-CD integration.
Python, Java, Rust, AWS, Kubernetes, OWASP Top 10, API Security Top 10, ASVS, SPVS, AISVS, SAST, DAST, SCA, CI/CD
United States or Canada or San Francisco or New York City or Seattle
$190k-$273k/yrRemoteFull Time
Apollo.io: AI-powered platform for B2B sales intelligence and outreach automation.
5+ YOE5+ years software engineering or application security experience; strong coding skills (Ruby, Python), Linux and GCP familiarity, deep AppSec/vulnerability management, pen-testing and SAST experience, AI security, and strong communication.
GeminiNasdaq: GEMI: Regulated platform for trading and storing digital assets.
7+ YOEExpertise in threat modeling, secure design/code review, penetration testing, application security controls, familiarity with regulated environments, strong communication, and experience building AI security tooling.
Anthropic: Developing safe and reliable artificial intelligence systems.
Hands-on application and infrastructure security experience, production-quality coding in Python/Go/Rust/TypeScript, threat-modeling, vulnerability ID, clear communication, and ability to assess unfamiliar codebases under time pressure.
Rockstar GamesNASDAQ: TTWO: Developer and publisher of world-class interactive entertainment and games.
5+ YOE5+ years identifying and remediating application security flaws; experience with SAST/SCA/IaC, CI/CD, container orchestration, Windows/Linux, and proficiency in C# and Python.
Mitsubishi UFJ Financial GroupNew York Stock Exchange: MUFG: Global financial group providing diverse banking and investment services.
5+ YOE5+ years in application security, DAST/SAST/SCA, secure coding in Java/Python, CI/CD automation, compliance with NIST/PCI-DSS/SOX; AI/ML security experience preferred.
Writer: Platform for building and deploying enterprise generative AI agents.
4+ YOE4+ years in application security; strong coding in Python/Java/Go/JavaScript/TypeScript; SAST/DAST in CI/CD; threat modeling; secure SDLC; security reviews; automation.
Clear Street: Cloud-native capital markets platform for institutional trading and clearing.
7+ YOE7+ years in DevSecOps/application or cloud security, hands-on CI/CD and cloud experience, SAST/DAST/SCA tool use, container/Kubernetes security, scripting and IaC familiarity, strong communication.
RobinhoodNASDAQ: HOOD: Provides a commission-free platform for investing and financial services.
5+ YOE5+ years in application security or related field; experience with secure SDLC and threat modeling; production-grade Python/Go experience; collaboration with engineers; reliability and incident response focus.
Chicago or Scottsdale or San Francisco or New York City
$149k-$218k/yrHybridFull Time
Early Warning Services: Operates payment and risk solutions for the financial industry.
8+ YOE8+ years network security experience with 5+ years in proxy and DLP; hands-on with Microsoft Defender, Palo Alto Prisma Access, Netskope; scripting (PowerShell, Python); experience with compliance and control testing.
Microsoft Defender, Palo Alto Prisma Access, Netskope, PowerShell, Python
K Health: Provides AI-powered virtual primary care and clinical diagnostic tools.
4+ YOERequires 4+ years in application, product, or software security; web, API, and distributed-system testing; source-code review; CI/CD security tooling; cloud expertise; and knowledge of secure design and policies.
Boston or Carmel or Chicago or Lambertville or New York City or San Francisco or United States
$60k-$80k/yrHybridFull Time
Real Chemistry: Provides marketing and communication services for healthcare companies.
5+ YOE5+ years cloud security experience (3+ in high-growth acceptable), including 2 years focused on application security; hands-on with AWS IAM, SAML/OIDC, GitHub security tooling, threat modeling, penetration testing, and familiarity with SOC 2/GDPR/HIPAA-adjacent controls.
Cogent Security: Autonomous AI agents for enterprise vulnerability remediation.
5+ years security engineering experience in application/product security, secure SDLC, threat modeling, code scanning, supply-chain security, strong software engineering skills, and familiarity with modern AI security concerns.
Principal Application Security Engineer - Threat Research
New York City, New York, United States
$144k-$288k/yrHybridFull Time
CVS HealthNYSE: CVS: Provides retail pharmacy, health insurance, and pharmacy benefit management services.
10+ YOE3+ Mgmt10+ years securing and deploying security technologies; deep experience with cloud, containerization, WAF, vulnerability analysis, and leading security initiatives.