Application Security Engineer New

Vannevar Labs; United States; Hybrid; USD 120,000 - 160,000; Full time

Benefits offered by this job

Health, dental, vision insurance

401k matching

Unlimited PTO

Pet and child care reimbursement

Job summary

Vannevar Labs is hiring an Application Security Engineer to embed security into our SaaS platform and hyper-accelerate secure feature delivery. You will work with software, DevOps, and platform teams, coordinating audits to embed threat modeling and automated SAST/DAST/SCA, and drive rapid vulnerability response across the SDLC.

You will secure web apps, automate AppSec workflows, and mentor teams on secure-by-default practices while aligning with NIST RMF requirements and defense industry

Qualifications

• 5+ years in Application/Security for software products.
• Experience embedding security into SDLC and DevOps.
• Ability to translate risk for engineers and executives.
• Experience securing LLM workflows and AI pipelines.
• U.S. defense contractor context and trustworthiness.

Responsibilities

• Implement and deploy enterprise SAST, SCA, secrets-scan, DAST, and container/IaC checks in CI/CD
• Embed with development teams to run threat models and coach secure-by-default habits
• Drive a shift-left vulnerability detection program to identify and remediate earlier in SDLC
• Coordinate with DevOps for cross-layer security issues and incident-response
• Support audit readiness and feed security lessons back into code, docs, and processes

Skills

Application Security

DevSecOps

Threat Modeling

LLM Security

NIST RMF

Secure SDLC

Communication

Defense Contractor Experience

Tools

CI/CD tooling

SAST/DAST tools

Container Security

Job description

Vannevar builds AI systems for the Department of War's most consequential missions. We have 125 deployments across every branch and combatant command spanning our core platform and five distinct products. An an example of how we work, when major combat operations started with Iran, we fielded a new product supporting 24/7 operations and 9,000+ users in three months.
How we build is our advantage: we deploy forward with the people who own the mission. Our engineers, product team, and CTO deploy forward to the point of friction, including visiting units in Ukraine. We focus on embedding directly with operational units supporting great power competition with China, combat operations with Iran, and counter-narcotics missions.

As an Application Security Engineer, you will help build security into our SaaS platform, ensuring we can quickly ship secure features to our customers. You will partner with software, DevOps, and platform teams, while coordinating with audit partners, to embed threat modeling, automated SAST/SCA/DAST, and rapid vulnerability response into every stage of our SDLC. Your work will be pivotal in protecting customer data, meeting compliance milestones, and scaling our security posture as the company grows.

• Implement and deploy enterprise standard SAST, SCA, secrets-scan, DAST, and container/IaC checks in CI/CD
• Embed with development teams to run threat models, review critical PRs, and coach secure-by-default habits.
• Drive a shift-left vulnerability detection program to identify and remediate vulnerabilities earlier in the software development lifecycle (SDLC).
• Coordinate with DevOps for application security issues that cross between application and infrastructure layers
• Support incident-response for product issues and feed lessons back into code, docs, and process.
• 5 + years in Application / Product Security
• Hands-on experience securing web applications and automating AppSec workflows.
• Familiarity with DevSecOps practices and container security & patching
• Clear, concise communicator who can translate risk for engineers
• Experience securing LLM workflows
• Experience with NIST Risk Management Framework
• Experience with software security at a U.S. defense contractor
• Active Security Clearance (or ability to obtain one) and willingness to travel onsite
• Health, dental, and vision insurance
• 100% remote - work from anywhere in the US
• 401k matching
• Flexible work environment - you manage your workday
• Pet and child care reimbursement during travel
• Unlimited PTO