Application Security Engineer (Fully Remote)

Partner Company; United States; Remote; USD 175,000 - 230,000; Full time

Benefits offered by this job

401(k) match

Medical/dental/vision insurance

Flexible PTO

Global parental leave

Learning stipend

Remote-work support

Office setup stipend

Job summary

Partner Company, a remote-first fintech protecting payment infrastructure, is seeking an Application Security professional with 3–5+ years of experience to shape security practices across the software development lifecycle and collaborate with Security and Engineering teams.

You will automate security controls with SAST, DAST, and SCA in CI/CD, manage the bug bounty program, deliver secure coding training, and promote security awareness while supporting a fast-moving, globally distributed team.

Qualifications

• 3–5+ years of dedicated experience in Application Security and/or full-stack development.
• Experience reviewing Java and Python applications for security vulnerabilities.
• Familiarity with SAST/DAST integration, bug bounty programs, and threat modeling methodologies.

Responsibilities

• Shape application security practices and integrate automated safeguards throughout the SDLC.
• Collaborate with Security and Engineering teams to identify vulnerabilities early and improve secure development.
• Automate security controls by integrating SAST, DAST, and SCA into CI/CD pipelines.
• Develop secure SDLC practices, manage the bug bounty program, and deliver secure coding training.
• Conduct application security reviews and promote security awareness across the organization.

Skills

Application Security

Full-Stack Development

Vulnerability Review (Java/Python)

SAST/DAST integration

Tools

SAST

DAST

SCA

Job description

• You will shape application security practices and integrate automated safeguards throughout the software development lifecycle.
• Collaborate closely with Security and Engineering teams to identify vulnerabilities early and make secure development more efficient.
• Work in a remote-first fintech environment solving complex challenges in payment technology.

Accountabilities:

• Automate security controls by integrating SAST, DAST, and SCA tools into CI/CD pipelines.
• Develop secure SDLC practices, manage the bug bounty program, and deliver secure coding training.
• Conduct application security reviews and promote security awareness across the organization.

Requirements:

• 3–5+ years of dedicated experience in Application Security and/or full-stack development.
• Practical experience reviewing Java and Python applications for security vulnerabilities.
• Strong familiarity with SAST/DAST integration, bug bounty programs, and threat modeling methodologies.
• Salary range of $175,000–$230,000 with early equity opportunities.
• 401(k) match, medical/dental/vision, flexible PTO, and global parental leave.
• Learning stipend, remote-work support, and office setup stipend.

Partner Company

This partner company protects payment infrastructure and enables secure, scalable digital commerce. It operates as a remote-first, security-focused fintech organization with a fast-moving culture and globally distributed teams.