Application Security Engineer — Hybrid/Remote with Equity

raydar; San Francisco (CA); Hybrid; USD 220,000 - 300,000; Full time

Benefits offered by this job

Health, dental and vision coverage

Paid parental leave

Commuter benefits

Job summary

raydar is seeking an Application Security Engineer to own the security of application code and features—from secure development standards to threat modeling and tooling. You will work with engineers to bake protections in from the start and define safe design patterns for automated components.

You will set secure development standards for authentication, secrets handling and input validation, and embed security checks in code review, pipelines and pre-release testing.

Qualifications

• Experience in application or product security on production systems at scale.
• Working proficiency in Python, Go or TypeScript for tooling and automation.
• Strong grounding in application security fundamentals, including web vulnerabilities, authentication/authorization, secure SDLC, secrets management, and cryptography.
• Understanding of security risks in automated software that calls tools, including design, permission scoping and risk review.

Responsibilities

• Set secure development standards for authentication, authorization, secrets handling and input validation.
• Embed security checks in code review, build pipelines and pre-release testing.
• Run threat modeling on feature work and translate findings into controls.
• Build security tooling and automated scans to extend coverage across the codebase.
• Define secure patterns for software calling third-party services and automated components.
• Create reusable guidelines, checklists and code-level guardrails for development teams.
• Produce security reviews and documentation to support product releases.
• Establish and apply rules for guarding sensitive information inside software.

Skills

App security on prod systems

Python/Go/TypeScript tooling

Web security fundamentals

Secure SDLC

Education

CS degree or equivalent experience

Job description

raydar is seeking an Application Security Engineer to own the security of application code and features—from secure development standards to threat modeling and tooling. You will work with engineers to bake protections in from the start and define safe design patterns for automated components.

You will set secure development standards for authentication, secrets handling and input validation, and embed security checks in code review, pipelines and pre-release testing.