Application Security Engineer II — AI-Driven Automation

MyFitnessPal; United States; On-site; USD 90,000 - 130,000; Full time

Benefits offered by this job

Healthcare benefits

401(k) with match

Volunteer days off

Mentorship program

Wellness allowance

Career development opportunities

Job summary

MyFitnessPal is seeking a Security Engineer II focused on Application Security to own the vulnerability management program, triage findings from SAST/DAST/SCA, and drive remediation with engineering teams.

The role involves building security automation, scaling bug bounty engagements, and collaborating with product teams to enable secure software delivery. Excellent AI-assisted tooling experience is a plus.

Qualifications

• 2-4 years of experience in security engineering or a closely related role.

Responsibilities

• Own day-to-day application security vulnerability management: triage findings from SAST, SCA, DAST, and mobile tooling; assign severity and due dates; drive tickets to resolution.
• Operate and grow our bug bounty program — scope engagements, triage submissions, validate findings, coordinate with vendors.
• Leverage AI and agentic tooling to accelerate security workflows and ensure AI-assisted development remains secure.
• Build and maintain security automation that normalizes vulnerability intake, drives notifications, and produces metrics.
• Partner with product engineering on remediation; join triage and refinement discussions and communicate security as an enabler.
• Perform security reviews of new features and integrations; provide risk-based guidance.
• Advocate secure coding practices and contribute to developer-facing security documentation and training.
• Administer and tune application security tooling across the SDLC; evaluate new security tech.
• Support identity and access management workflows and automation.

Skills

Security engineering

Application security

SAST/DAST/SCA

AI tooling

CI/CD

Kubernetes

Python

Bug bounty

Security automation

Security reviews

Education

BS in Computer Science or IS related field

Tools

Claude Code

LLM-powered tooling

GitHub Actions

SOAR platforms

Python

Job description

MyFitnessPal is seeking a Security Engineer II focused on Application Security to own the vulnerability management program, triage findings from SAST/DAST/SCA, and drive remediation with engineering teams.

The role involves building security automation, scaling bug bounty engagements, and collaborating with product teams to enable secure software delivery. Excellent AI-assisted tooling experience is a plus.