Application Security Engineer Fast-growing software company San Francisco, California $220k to $300k USD base a year Posted today

raydar; San Francisco (CA); Hybrid; USD 220,000 - 300,000; Full time

Benefits offered by this job

Health, dental and vision coverage

Paid parental leave

Commuter benefits

Job summary

raydar is seeking an Application Security Engineer to own the security of application code and features—from secure development standards to threat modeling and tooling. You will work with engineers to bake protections in from the start and define safe design patterns for automated components.

You will set secure development standards for authentication, secrets handling and input validation, and embed security checks in code review, pipelines and pre-release testing.

Qualifications

• Experience in application or product security on production systems at scale.
• Working proficiency in Python, Go or TypeScript for tooling and automation.
• Strong grounding in application security fundamentals, including web vulnerabilities, authentication/authorization, secure SDLC, secrets management, and cryptography.
• Understanding of security risks in automated software that calls tools, including design, permission scoping and risk review.

Responsibilities

• Set secure development standards for authentication, authorization, secrets handling and input validation.
• Embed security checks in code review, build pipelines and pre-release testing.
• Run threat modeling on feature work and translate findings into controls.
• Build security tooling and automated scans to extend coverage across the codebase.
• Define secure patterns for software calling third-party services and automated components.
• Create reusable guidelines, checklists and code-level guardrails for development teams.
• Produce security reviews and documentation to support product releases.
• Establish and apply rules for guarding sensitive information inside software.

Skills

App security on prod systems

Python/Go/TypeScript tooling

Web security fundamentals

Secure SDLC

Education

CS degree or equivalent experience

Job description

# Application Security EngineerFast-growing software company* LocationSan Francisco, California* TypeFull-time* Posted4 November 2026Apply for this roleThe role, as published## About the companyOur client is a fast-growing software company.## The roleRaydar is recruiting for this role on behalf of our client. Own the security of application code and software features, from secure development standards and code review through threat modeling, security tooling and protection of sensitive data. Work closely with engineers to build protections in from the start and to define safe design patterns for automated software components.## What you'll do* **Set secure development standards for authentication**, authorization, secrets handling and input validation that engineers can adopt easily.* Embed security checks in code review, build pipelines and pre-release testing to catch risks before release.* **Run threat modeling on** feature work and turn findings into practical controls.* **Build security tooling** and automated scans that extend coverage across the codebase, using AI to speed up review.* Define secure patterns for software that calls third-party services and automated components, including credential storage, response validation and permission limits.* **Create reusable guidelines**, checklists and code-level guardrails for development teams.* Produce security reviews and documentation to support product releases.* **Establish and apply rules** for guarding sensitive information inside software, covering who can view it, what gets screened on the way out and how activity is recorded for later review.## What we're looking for* Experience in application or product security on production systems at scale.* Working proficiency in Python, Go or TypeScript for tooling and automation.* Strong grounding in application security fundamentals, including common web vulnerability classes, authentication and authorization, secure development lifecycle, secrets management, secure integrations and basic cryptography.* Understanding of the security risks in automated software that takes actions and calls tools, including design, permission scoping and risk review.## Bonus points* Computer science degree, or equivalent experience.* Familiarity with compliance frameworks such as FedRAMP, HIPAA, SOC 2 or ISO 27001.## Benefits* Health, dental and vision coverage* Paid parental leave* Commuter benefits## Location and work model* San Francisco, California, United States* Hybrid with 3 days in-office, or remote in US/UK* Full-time## Compensation, as the posting describes it* **Base salary:** $220K - $300K* Equity* Retirement plan* Flexible time offPay$220k to $300kUSD base a year