App Sec Engineer II: AI-Powered Security & Automation

Socket.dev; Northern (KY); Hybrid; USD 90,000 - 130,000; Full time

Benefits offered by this job

Health Insurance

401(k) with match

Flexible time off

Volunteer days

Mentorship program

Wellness allowance

Job summary

MyFitnessPal is seeking a Security Engineer II focused on Application Security to safeguard the codebase, applications, and development processes across mobile and backend platforms.

You will own the day-to-day vulnerability management program, triage findings from SAST/DAST/SCA, drive remediation, and build automation to reduce manual effort. This hands-on role offers growth and partnership with product teams.

Qualifications

• Experience with app security assessment techniques (SAST/DAST/SCA) and remediation steps.
• Secure development practices for web and mobile apps (OWASP Top 10/MASVS).
• Experience with AI-assisted tooling and agentic workflows in security.
• Vulnerability management and triage experience with clear remediation guidance.
• Familiarity with cloud microservices, containers, Kubernetes, and IaC.

Responsibilities

• Own day-to-day application security vulnerability management and triage findings from SAST/DAST/SCA; assign severity and due dates.
• Operate and grow bug bounty programs; scope engagements and triage submissions.
• Leverage AI and agentic tooling to accelerate security workflows and automated remediation support.
• Build security automation for vulnerability intake, notifications, SLAs, and metrics reporting.
• Collaborate with product engineering on remediation and secure-by-default practices.
• Perform security reviews of new features, services, and third-party integrations.
• Develop developer-facing security documentation and training.

Skills

SAST/DAST/SCA

Kubernetes

Python

CI/CD

Secure coding

AI tooling

Education

BS in CS/IS

GIAC/OSCP/CSSLP

Job description

MyFitnessPal is seeking a Security Engineer II focused on Application Security to safeguard the codebase, applications, and development processes across mobile and backend platforms.

You will own the day-to-day vulnerability management program, triage findings from SAST/DAST/SCA, drive remediation, and build automation to reduce manual effort. This hands-on role offers growth and partnership with product teams.