Application Security Engineer — Remote, High-Impact Defense

Vannevar Labs; United States; Remote; USD 160,000 - 210,000; Full time

Benefits offered by this job

Health insurance

401k matching

Unlimited PTO

Job summary

Vannevar Labs is seeking an Application Security Engineer to embed security into our SaaS platform. You will partner with software, DevOps, and platform teams to ship secure features, protect customer data, and meet compliance milestones.

The role emphasizes threat modeling, automated SAST/SCA/DAST, and rapid vulnerability response across the SDLC, with remote-friendly options for the US market and equity compensation.

Qualifications

• 5+ years in Application / Product Security and threat modeling experience.
• Hands-on security of web apps and automated AppSec workflows.
• Familiarity with DevSecOps and container security practices.
• Ability to translate risk for engineers clearly and concisely.

Responsibilities

• Implement and deploy enterprise standard SAST, SCA, secrets-scan, DAST, and container/IaC checks in CI/CD.
• Embed with development teams to run threat models, review PRs, and coach secure-by-default habits.
• Drive shift-left vulnerability detection and remediation in the SDLC.
• Coordinate with DevOps on security issues across app and infra layers.
• Support incident response for product issues and feed lessons into code/docs/process.

Skills

5+ years in AppSec

Web application security

DevSecOps practices

Clear communicator

Tools

SAST

SCA

DAST

Container security

Job description

Vannevar Labs is seeking an Application Security Engineer to embed security into our SaaS platform. You will partner with software, DevOps, and platform teams to ship secure features, protect customer data, and meet compliance milestones.

The role emphasizes threat modeling, automated SAST/SCA/DAST, and rapid vulnerability response across the SDLC, with remote-friendly options for the US market and equity compensation.