Application Security Engineer

Iceberg; New York (NY); Hybrid; USD 120,000 - 190,000; Full time

Job summary

Iceberg is building a security engineering team in New York City with very high engineering standards. We’re hiring engineers at mid-level through VP-equivalent (Staff/Principal).

The roles blend software development with application and offensive security, and require hands-on coding and architectural work. AI is increasingly shaping our environment; you will identify risks, prototype secure solutions, and influence development practices.

Qualifications

• Background in software engineering transitioning into security or hands-on security engineer with strong coding skills.
• Experience applying security in software design and architecture.

Responsibilities

• Identify security risks in complex, evolving tech environments.
• Prototype secure solutions and improve development practices.
• Collaborate with software engineers and communicate decisions clearly.

Skills

Software engineering

Application security

Offensive security

AI in security

Job description

I'm recruiting for a security engineering team in New York City where the engineering bar is extremely high.

They're expanding their Application Security team and looking to hire engineers at different levels, from mid-level through to VP (equivalent to Staff/Principal Engineer at many technology companies).

The team is relatively small, but the engineering challenges are complex. The technology environment is heavily customised, constantly evolving, and requires engineers who can think independently, solve difficult problems and build solutions rather than simply rely on existing security products.

Software engineering ability is fundamental to these positions. We're looking for people who started in software engineering before moving into application or offensive security, or security engineers who remain deeply hands-on with coding, tooling and application architecture.

AI is also becoming a significant part of the engineering environment. As AI-assisted development and coding agents change how software is written, the team needs engineers who understand the security implications, can identify emerging risks and think creatively about how AI can improve application security itself.

You'll work closely with highly capable software engineers and development teams, so strong communication skills and the ability to challenge technical decisions constructively are essential.

Location: New York City with three days in the office per week.

If you're an engineer who enjoys writing code, solving complex security problems and working alongside people with exceptionally high technical standards, get in touch.