Application Security Engineer [Remote-US]

Remote; San Francisco (CA); Remote; USD 175,000 - 215,000; Full time

Benefits offered by this job

Health, dental, vision

Life insurance

Headspace

Wellness allowance

401(k) with company match

Home office stipend $2,000

MacBook Pro provided

Four weeks PTO + parental leave

Professional development up to $5,000

LinkedIn Learning + BetterUp

Remote-first with occasional travel

Job summary

Quanata, LLC is seeking an Application Security Engineer to embed security across our AI-native insurance technology platform. You will partner with Product, Engineering, and Security to identify risks early, strengthen secure development practices, and ensure resilient, scalable applications.

You will lead threat modeling, conduct secure code reviews, and develop automated guardrails across the SDLC. A fast-paced environment requires strong collaboration and clear communication with

Qualifications

• 4–6+ years in software engineering with at least 2 years in app security.
• Experience partnering with product and engineering teams to boost security.
• Knowledge of secure-by-design principles and modern app security practices.
• Familiarity with OWASP Top 10, ASVS, MASVS.
• Experience with threat modeling methodologies (STRIDE, PASTA).
• Working knowledge of cloud platforms and modern app architectures.
• Proficiency in at least one programming language and its security ecosystem.
• Strong communication skills and ability to influence stakeholders.
• Comfortable in a fast-paced, changing environment.

Responsibilities

• Partner with Product and Engineering to integrate security into design and development.
• Lead threat modeling exercises and identify practical security solutions.
• Conduct secure code reviews, app security assessments, and vulnerability analysis.
• Develop and implement automated security guardrails across the SDLC.
• Investigate, prioritize, and drive remediation of findings.
• Promote secure coding practices through training and awareness.
• Collaborate with Security, Privacy, and Business Assurance to support risk management objectives.
• Create and maintain security standards and best practices across teams.

Skills

Application security

Threat modeling

Secure coding

Code reviews

Cloud platforms

Programming language

Communication

Team collaboration

OWASP ASVS MASVS

Education

Associate's degree or equivalent

Bachelor's degree preferred

Job description

Join our celebrated community of veterans! We encourage all qualified veterans to explore current career opportunities specifically curated for our qVets community. These postings represent our commitment to veteran hiring and offer a chance to join a team that values your experience, discipline, and dedication. We look forward to welcoming you to our organization and supporting your continued growth and success.

The Role

We're looking for an Application Security Engineer to help build secure-by-default products and services across Quanata's AI-native insurance technology platform. In this role, you'll partner closely with Product, Engineering, and Security teams to identify risks early, strengthen secure development practices, and ensure our applications are resilient, scalable, and compliant.

You’ll play a key role in embedding security throughout the software development lifecycle while helping teams move quickly and safely.

Your Day-to-Day

• Partner with Product and Engineering teams to integrate security into application design and development

• Lead threat modeling exercises and identify practical security solutions for complex systems

• Conduct secure code reviews, application security assessments, and vulnerability analysis

• Develop and implement automated security guardrails across the SDLC

• Investigate, prioritize, and drive remediation of application security findings

• Promote secure coding practices through training, coaching, and awareness initiatives

• Collaborate with Security, Privacy, and Business Assurance teams to support compliance and risk management objectives

• Create and maintain security standards, procedures, and best practices that scale across teams

About You

• Associate's degree or equivalent experience required; Bachelor's degree preferred

• 4-6+ years of experience in software engineering, including at least 2 years focused on application security

• Experience partnering directly with software development teams to improve application security

• Knowledge of secure-by-design principles and modern application security practices

• Familiarity with OWASP Top 10, ASVS, MASVS, and common application security frameworks

• Experience with threat modeling methodologies such as STRIDE, PASTA, or similar approaches

• Working knowledge of cloud platforms and modern application architectures

• Proficiency in at least one programming language and its security ecosystem

• Strong communication skills and the ability to influence technical and non-technical stakeholders

• Comfortable operating in a fast-paced environment with shifting priorities

Bonus Points

• Security certifications such as CSSLP, GWEB, OSWE, or similar

• Experience working in insurance, financial services, healthcare, or other regulated industries

• Advanced knowledge of cloud security and application security architecture

• Experience with mobile application security, QA testing, or penetration testing

• Familiarity with AI technologies, LLM security, or prompt engineering

• Experience building scripts or automations to streamline security processes

• Active involvement in the security community through conferences, mentoring, presentations, publications, or open-source contributions

Salary: $175,000 to $215,000*

*Please note that the final salary offered will be determined based on the selected candidate's skills, and experience, as well as the internal salary structure at Quanata. Our aim is to offer a competitive and equitable compensation package that reflects the candidate's expertise and contributions to our organization.

Additional Details:

• Benefits: We provide a wide variety of health, wellness and other benefits. These include medical, dental, vision, life insurance and supplemental income plans for you and your dependents, a Headspace app subscription, monthly wellness allowance and a 401(k) Plan with a company match.

• Work from Home Equipment: Given our virtual environment— in order to set you up for success at home, a one-time payment of $2K will be provided to cover the purchase of in-home office equipment and furniture at your discretion. Also, our teams work with MacBook Pros, which we will deliver to you fully provisioned prior to your first day.

• Paid Time Off: All employees accrue four weeks of PTO in their first year of employment. New parents receive twelve weeks of fully paid parental leave which may be taken within one year after the birth and/or adoption of a child. The twelve weeks is applicable to both birthing and non-birthing parent.

• Personal and Professional Development: We’re committed to investing in and helping our people grow personally and professionally. All employees receive up to $5000 each year for professional learning, continuing education and career development. All team members also receive LinkedIn Learning subscriptions and access to multiple different coaching opportunities through BetterUp.

• Location: We are a remote-first company for most positions so you may work from anywhere you like in the U.S, excluding U.S. territories. For most positions, occasional travel may be requested or encouraged but is not required. Some positions might require travel per the job description provided to the employee. Employees based in the San Francisco Bay Area or in Providence, Rhode Island may commute to one of our local offices as desired.

• Hours: We maintain core meeting hours from 9AM - 2PM Pacific time for collaborating with team members across all time zones.

Quanata, LLC is an equal opportunity workplace. We are committed to equal employment opportunities regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity or Veteran status. Pursuant to the San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records.

If you are a San Francisco resident, please read the City and County of San Francisco's Fair Chance Ordinance notice. https://www.sf.gov/sites/https://www.sf.gov/sites/default/files/2022-12/FCO%20poster2020_0.pdf This role is employed by Quanata, LLC which is a separate company in the State Farm family of companies. If you require a reasonable accommodation, please reach out to your Talent Acquisition Partner for assistance.