Application Security Engineer [Remote-US]

Hidden Jobs; United States; Remote; USD 175,000 - 215,000; Full time

Benefits offered by this job

Medical, dental, vision insurance

401(k) with company match

Home office stipend

MacBook Pro provided

4 weeks PTO

Parental leave (12 weeks)

Professional learning budget (up to $5

LinkedIn Learning access

Headspace subscription

Job summary

quanata is seeking an Application Security Engineer to join a remote-first team focused on building secure-by-default products across an AI-native technology platform. You will partner with product and engineering to embed security into the SDLC, identify risks early, and help applications stay resilient and compliant.

This role balances hands-on security work with cross-team influence in a fast-moving environment.

Qualifications

• Associate's degree or equivalent experience, with a bachelor's degree preferred.
• 4–6+ years of software engineering experience, including at least 2 years focused on application security.
• Familiarity with OWASP Top 10, ASVS, MASVS, and similar application security frameworks.
• Working knowledge of cloud platforms and modern application architectures.
• Proficiency in at least one programming language and its associated security tooling.
• Strong communication skills and the ability to influence both technical and non-technical stakeholders.

Responsibilities

• Partner with product and engineering teams to integrate security considerations into application design and development from the earliest stages.
• Lead threat modeling exercises using methodologies such as STRIDE or PASTA, translating findings into practical mitigations for complex systems.
• Conduct secure code reviews, application security assessments, and vulnerability analyses, then drive prioritized remediation.
• Develop and roll out automated security guardrails that operate throughout the software development lifecycle.
• Promote secure coding practices through training, coaching, and awareness initiatives for engineers and adjacent roles.
• Collaborate with security, privacy, and business assurance stakeholders on compliance and risk management objectives, and help maintain security standards and best practices that scale.

Skills

Threat modeling

Secure code reviews

Vulnerability assessment

Security tooling

Cloud platforms

Education

Associate degree

Bachelor's degree preferred

Job description

Role overview

Join a remote-first organization as an Application Security Engineer focused on building secure-by-default products across an AI-native technology platform. You will partner closely with product and engineering teams to embed security into the software development lifecycle, identify risks early, and help applications stay resilient, scalable, and compliant. The role is well-suited for someone who wants to balance hands-on security work with cross-team influence in a fast-moving environment.

Responsibilities

• Partner with product and engineering teams to integrate security considerations into application design and development from the earliest stages.
• Lead threat modeling exercises using methodologies such as STRIDE or PASTA, translating findings into practical mitigations for complex systems.
• Conduct secure code reviews, application security assessments, and vulnerability analyses, then drive prioritized remediation.
• Develop and roll out automated security guardrails that operate throughout the software development lifecycle.
• Promote secure coding practices through training, coaching, and awareness initiatives for engineers and adjacent roles.
• Collaborate with security, privacy, and business assurance stakeholders on compliance and risk management objectives, and help maintain security standards and best practices that scale.

Requirements

• Associate's degree or equivalent experience, with a bachelor's degree preferred.
• 4–6+ years of software engineering experience, including at least 2 years focused on application security.
• Familiarity with OWASP Top 10, ASVS, MASVS, and similar application security frameworks.
• Working knowledge of cloud platforms and modern application architectures.
• Proficiency in at least one programming language and its associated security tooling.
• Strong communication skills and the ability to influence both technical and non-technical stakeholders.

Nice to have

• Security certifications such as CSSLP, GWEB, or OSWE.
• Background in regulated industries such as insurance, financial services, or healthcare.
• Experience with mobile application security, QA testing, or penetration testing.
• Familiarity with AI technologies, LLM security, or prompt engineering.
• Scripting and automation experience to streamline security processes.
• Active participation in the security community through conferences, mentoring, publications, or open-source contributions.

Benefits and work setup

• Remote-first within the U.S.; core collaboration hours run 9 AM to 2 PM Pacific.
• Medical, dental, vision, life insurance, supplemental income plans, a Headspace subscription, monthly wellness allowance, and a 401(k) with company match.
• $2,000 one-time home office stipend, with a company-issued MacBook Pro shipped before day one.
• Four weeks of accrued PTO in the first year and twelve weeks of fully paid parental leave for both birthing and non-birthing parents.
• Up to $5,000 annually for professional learning, plus LinkedIn Learning and coaching resources.
• Indicative salary range of $175,000 to $215,000, with final offers based on skills, experience, and internal structure.