Senior Application Engineer [Remote-US]

Quanata's Veterans Job Board; Polska; Hybrid; PLN 908,000 - 1,483,000; Full time

Benefits offered by this job

Health insurance

Dental insurance

Vision insurance

Life insurance

401(k) match

Headspace subscription

Wellness allowance

Remote equipment stipend

MacBook Pro provided

PTO 4 weeks

Parental leave 12 weeks

Professional development

Job summary

Quanata, LLC is seeking a Senior Application Security Engineer to partner with web and backend teams, embedding security into the SDLC and guiding product security with a focus on AI/ML considerations.

You will conduct secure design reviews, threat modeling, code reviews, and vulnerability remediation, bridging frontend, backend, and API security across the organization.

This remote-friendly role offers opportunities for impact, a competitive compensation package, and extensive benefits.

Qualifications

• 6–8 years of application security or full-stack development with security expertise.

Responsibilities

• Partner with a product portfolio to manage product security, with a strong emphasis on AI/ML automation, security consulting and cross-functional collaboration with non-portfolio teams.
• Lead security design reviews and threat modeling for APIs, web features, and service integrations.
• Integrate security tooling - including SAST, SCA, and DAST - into CI/CD pipelines and developer workflows.
• Review source code and deployment configurations to identify security vulnerabilities, and partner with developers to triage, remediate, and validate findings.
• Support secure development practices across engineering teams, including maintaining AppSec guidance and contributing to security awareness and enablement.
• Develop and deploy AppSec automation and integrations, utilizing AI/ML as possible, including ASVS scanning and Burp Suite Enterprise.
• Support application security integration reviews, SaaS security assessments, and open-source software reviews.
• Participate in cross-functional incident response and remediation planning.

Skills

Application security

Full-stack security

Threat modeling

CI/CD security

SAST/DAST/SCA

Code reviews

AI/ML security

Team collaboration

Tools

CodeQL

Wiz

SonarQube

Snyk

Burp Suite Enterprise

Job description

Join our celebrated community of veterans! We encourage all qualified veterans to explore current career opportunities specifically curated for our qVets community. These postings represent our commitment to veteran hiring and offer a chance to join a team that values your experience, discipline, and dedication. We look forward to welcoming you to our organization and supporting your continued growth and success.

The Role

As a Senior Application Security Engineer, you’ll be a key security partner to our web and backend engineering teams, helping build security into every stage of the software development lifecycle.

You’ll work closely with a product portfolio to guide product security, with particular emphasis on AI/ML security considerations and collaboration with data science teams. From secure design and threat modeling to code reviews and vulnerability remediation, you’ll help engineering teams identify and address security risks early.

This role is ideal for someone who combines deep application security expertise with a developer-focused mindset. You’ll bridge frontend, backend, and API security while helping engineers solve complex security challenges and strengthen secure development practices across the organization.

Your Day-to-Day

• Partner with a product portfolio to manage product security, with a strong emphasis on AI/ML automation, security consulting and cross-functional collaboration with non-portfolio teams.
• Lead security design reviews and threat modeling for APIs, web features, and service integrations.
• Integrate security tooling - including SAST, SCA, and DAST - into CI/CD pipelines and developer workflows.
• Review source code and deployment configurations to identify security vulnerabilities, and partner with developers to triage, remediate, and validate findings.
• Support secure development practices across engineering teams, including maintaining AppSec guidance and contributing to security awareness and enablement.
• Develop and deploy AppSec automation and integrations, utilizing AI/ML as possible, including ASVS scanning and Burp Suite Enterprise.
• Support application security integration reviews, SaaS security assessments, and open-source software reviews.
• Participate in cross-functional incident response and remediation planning.

About You

Experience & Education

• 6-8 years of experience in application security or full-stack development with security expertise.

Technical Skills

• Familiarity with application risks and vulnerabilities, including the OWASP Top 10 (web and GenAI LLM), API security, SSRF, and related security concerns.
• Experience with code scanning tools such as CodeQL, Wiz, SonarQube, or Snyk.
• Comfortable reading and debugging complex codebases across the technology stack.

Professional Skills

• Clear and thoughtful communicator who can effectively guide engineers at all levels.

Bonus Points

• Experience with GraphQL security.
• Participation in security champions programs or secure SDLC rollouts.
• Contributions to open-source security tooling.
• Familiarity with infrastructure-as-code and container security.
• Experience automating, security, and developing with AI/ML.

Salary: $232,000 to $379,000

*Please note that the final salary offered will be determined based on the selected candidate's skills, and experience, as well as the internal salary structure at Quanata. Our aim is to offer a competitive and equitable compensation package that reflects the candidate's expertise and contributions to our organization.

• Benefits : We provide a wide variety of health, wellness and other benefits. These include medical, dental, vision, life insurance and supplemental income plans for you and your dependents, a Headspace app subscription, monthly wellness allowance and a 401(k) Plan with a company match.
• Work from Home Equipment : Given our virtual environment - in order to set you up for success at home, a one-time payment of $2K will be provided to cover the purchase of in-home office equipment and furniture at your discretion. Also, our teams work with MacBook Pros, which we will deliver to you fully provisioned prior to your first day.
• Paid Time Off: All employees accrue four weeks of PTO in their first year of employment. New parents receive twelve weeks of fully paid parental leave which may be taken within one year after the birth and/or adoption of a child. The twelve weeks is applicable to both birthing and non-birthing parent.
• Personal and Professional Development: We're committed to investing in and helping our people grow personally and professionally. All employees receive up to $5000 each year for professional learning, continuing education and career development. All team members also receive LinkedIn Learning subscriptions and access to multiple different coaching opportunities through BetterUp.
• Location : We are a remote-first company for most positions so you may work from anywhere you like in the U.S., excluding U.S. territories. For most positions, occasional travel may be requested or encouraged but is not required. Some positions might require travel per the job description provided to the employee. Employees based in the San Francisco Bay Area or in Providence, Rhode Island may commute to one of our local offices as desired.
• Hours : We maintain core meeting hours from 9AM - 2PM Pacific time for collaborating with team members across all time zones.

Quanata, LLC is an equal opportunity workplace. We are committed to equal employment opportunities regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity or Veteran status. Pursuant to the San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records.

This role is employed by Quanata, LLC which is a separate company in the State Farm family of companies.

If you require a reasonable accommodation, please reach out to your Talent Acquisition Partner for assistance.