Application Security Engineer: Threat Modeling & Automation

Embedded Shishya

United States

Remote

USD 180,000 - 200,000

Full time

14 days+

Application generator

Turn this role into an interview — a resume and cover letter built around what this employer wants.

Get past ATS filters

Benefits offered by this job

Flexible PTO

Learning & Development stipend

Headspace access

401K + stock options

Full medical, dental, vision

Job summary

Virtru is seeking an Application Security Engineer to join our product security team. You will help secure our platform built on Go and JavaScript, collaborating with development and SRE to strengthen security across the software development lifecycle.

An ideal candidate has 4+ years in secure development, a strong foundation in cryptography, and hands-on experience with bug bounty, vulnerability management, threat modeling, and SAST/DAST/IAST tooling within cloud environments.

Qualifications

4+ years in secure development or application security.
Deep knowledge of authentication and web architecture.
Experience with Node.js and Go.
Experience running bug-bounty, pentesting, vulnerability scanning programs.
Experience setting up and maintaining SAST, DAST, IAST and SCA tooling.
Familiarity with security tools such as Burp, ZAP, Qualys, Nessus.

Responsibilities

Security Engineering and collaboration with development, SRE, and stakeholders to promote security across the SDLC.
Identify and implement security improvements independently.
Implement, manage, and automate vulnerability management processes.
Prioritize and remediate vulnerabilities from internal scans, pentests, and bug bounties.
Conduct threat modeling, code audits, and design reviews with engineers.
Establish and automate threat hunting capabilities; enhance security event logging.
Integrate and manage dynamic and static code analysis tools; ensure tooling operates in the pipeline.