787 senior application security engineer jobs at 502 companies in United States
🚀PromotedHiringCafe
Founding Backend / Infra Engineer
Cupertino, CA, US
$160k-$300k/yrOn-SiteFull Time
HiringCafe: Building a 100× better job search engine to take on Indeed and LinkedIn.
Own the crawlers, pipelines, and infrastructure powering a real-time job search engine. Strong Node.js and Python fundamentals; bonus points for security and reverse-engineering chops.
Monarch Money: A subscription-based platform for personal budgeting and wealth management.
5+ YOE5+ years security engineering experience with application and AI security, proficiency in Python, SAST/DAST, secure code review, vulnerability management, and experience with Semgrep, Burp Suite, and Nuclei.
Temporal Technologies: Durable execution platform for building resilient, scalable cloud applications.
5+ YOE5+ years in application/product security, Bachelor's in CS or related (or equivalent), experience with threat modeling, SAST/DAST, Kubernetes security, EMR tools, strong communication and partnership with engineering teams.
SAST, DAST, OWASP Top 10, MCP security specifications, Kubernetes, Python, Go
BitGoNYSE: BTGO: Provides secure infrastructure for institutional digital asset management.
8+ YOE8+ years building and scaling application security programs for FinTech/Web3; strong engineering background in distributed systems, Python or Java, Kubernetes, AWS, Terraform; experience with SAST/DAST, CI/CD security automation, KMS/encryption, SOC 2/GDPR controls, and securing AI/ML lifecycles.
Temporal: Platform for building and running reliable distributed applications.
5+ YOE5+ years in application security; bachelor's in CS/cybersecurity or equivalent; strong collaboration with engineering; knowledge of encryption, authentication, and secure protocols; SAST/DAST; Kubernetes security; multi-tenant security; Python/Go familiarity.
Tatari: A platform for buying and measuring TV advertising campaigns.
Production Python experience, significant hands-on application security experience, threat modeling, building security tooling/automation, familiarity with AWS and Kubernetes, and SAST/DAST/SCA/CI-CD integration.
Python, Java, Rust, AWS, Kubernetes, OWASP Top 10, API Security Top 10, ASVS, SPVS, AISVS, SAST, DAST, SCA, CI/CD
Canary Technologies: Provides AI-powered guest management software for the hospitality industry.
6+ YOE6+ years in security engineering/DevSecOps, strong AppSec tooling and SDLC integration experience, AWS/Kubernetes security, programming in Python/Go/JavaScript, excellent communication and teamwork.
Hewlett Packard EnterpriseNYSE: HPE: Providing global edge-to-cloud infrastructure and IT solutions for businesses.
5+ YOE5–8+ years in application security; CI/CD security; SBOM/NIST/SSDF knowledge; secrets management; WAF and API security; SAST/DAST/SCA; cloud security; programming in Python/Java/Go/Node.js.
New Balance: Designs and manufactures athletic footwear, apparel, and sports equipment.
5+ YOE5+ years in application/security engineering with SDLC and DevSecOps integration, security automation/SOAR, Azure/cloud security, threat modeling, and PCI DSS experience.
Brex: Corporate cards and spend management software for businesses.
5+ YOE5+ years in application security; strong penetration testing and vulnerability identification skills; experience with threat modeling, secure development practices, Python scripting, and cross-team communication.
ServiceNowNYSE: NOW: Provides a cloud platform for automating enterprise digital workflows.
5+ YOE5+ years in application security, 3+ years penetration testing, experience with SAST/DAST, Snyk, GitHub Dependabot, Burp Suite, Python/Golang, cloud security (AWS/GCP/Azure), and AI/LLM security; BS or equivalent.
AlphaSense: AI-powered search platform for business and financial market intelligence.
6+ YOE6+ years engineering, 4+ in AI/application security at a SaaS/cloud-native company; hands-on coding in multiple languages; experience with agentic AI/MCP; production SAST/SCA pipeline security; threat modeling or developer security training; layered security mindset.
Metropolis: Computer vision technology for checkout-free parking and retail payments.
Experience in application and product security, DevSecOps/secure SDLC, cloud-native system security, CI/CD security tooling, strong scripting/software engineering skills, and ability to partner with engineering teams.
United States or Canada or San Francisco or New York City or Seattle
$190k-$273k/yrRemoteFull Time
Apollo.io: AI-powered platform for B2B sales intelligence and outreach automation.
5+ YOE5+ years software engineering or application security experience; strong coding skills (Ruby, Python), Linux and GCP familiarity, deep AppSec/vulnerability management, pen-testing and SAST experience, AI security, and strong communication.