Application Security Engineer - Secure SaaS at Scale

InvestedintheMission; United States; Remote; USD 160,000 - 210,000; Full time

Benefits offered by this job

Health insurance

100% remote - work from anywhere in US

401k matching

Mental benefits

Flexible work environment

Pet and child care reimbursement

Unlimited PTO

Job summary

Vannevar is seeking an Application Security Engineer to build security into our SaaS platform, shipping secure features quickly and partnering with software, DevOps, and platform teams.

You will embed threat modeling, automate SAST/DAST, drive shift-left practices, and coordinate with audit partners to scale our security posture as the company grows.

This fully remote role offers a competitive salary and equity opportunity across the United States.

Qualifications

• 5+ years in Application / Product Security.
• Hands-on experience securing web applications and automating AppSec workflows.
• Familiarity with DevSecOps practices and container security & patching.
• Experience with GitHub Actions, Python, TypeScript/JavaScript.
• Clear, concise communicator who can translate risk for engineers.

Responsibilities

• Implement and deploy enterprise standard SAST, SCA, secrets-scan, DAST, and container/IaC checks in CI/CD.
• Embed with development teams to run threat models and review critical PRs.
• Drive a shift-left vulnerability program to identify and remediate vulnerabilities earlier in the software development lifecycle (SDLC).
• Coordinate with DevOps on application security issues that cross between application and infrastructure layers.
• Support incident-response for product issues and feed lessons back into code, docs, and process.

Skills

Security engineering

Threat modeling

DevSecOps

Web application security

Tools

GitHub Actions

Python

TypeScript/JavaScript

Job description

Vannevar is seeking an Application Security Engineer to build security into our SaaS platform, shipping secure features quickly and partnering with software, DevOps, and platform teams.

You will embed threat modeling, automate SAST/DAST, drive shift-left practices, and coordinate with audit partners to scale our security posture as the company grows.

This fully remote role offers a competitive salary and equity opportunity across the United States.