Application Security Engineer — Threat Modeling & SDLC

TRM Labs; Northern (KY); Hybrid; USD 140,000 - 190,000; Full time

Job summary

TRM Labs is seeking an experienced Application Security Engineer to design and implement mission-critical security across TRM’s software platforms. You will lead security reviews, threat modeling, and vulnerability management while partnering with engineering to embed secure practices in our CI/CD pipelines.

The role requires deep hands-on experience with secure coding, testing tools, cloud security, and modern SDLC practices.

Qualifications

• Minimum 8 years of experience in Software Development and testing.
• BS (or equivalent) in Computer Science, Computer Engineering, or related field.
• Proficiency in Python, NodeJS, React.
• Strong understanding of encryption, authentication, and authorization protocols.
• Deep experience with OWASP and CWE, testing methodologies, and security tooling.

Responsibilities

• Lead application security reviews and threat modeling, including secure code review, architecture design, and testing.
• Develop automated testing and mature our Secure SDLC.
• Own and perform application security vulnerability management.
• Coordinate penetration testing engagements.
• Support engineers and product teams by developing application security best practices.
• Develop and maintain the bug bounty program.
• Bootstrap platform security initiatives to protect TRM data.
• Foster security champions within engineering and coordinate secure code training.

Skills

Python

NodeJS

React

Threat modeling

OWASP/CWE knowledge

Security testing

SAST/DAST/SCA tools

BurpSuite

OWASP ZAP

GitHub Advanced Security

Cloud security (GCP/AWS)

Agile development

Red Teaming / pentesting

Security training / coaching

Communication skills

Security certifications (OSCP/CEH/GWAP

Education

BS in Computer Science, Computer Engineering, or related field

Tools

BurpSuite

OWASP ZAP

GitHub Advanced Security

Threat modeling tools (OWASP Threat Dragon)

Job description

TRM Labs is seeking an experienced Application Security Engineer to design and implement mission-critical security across TRM’s software platforms. You will lead security reviews, threat modeling, and vulnerability management while partnering with engineering to embed secure practices in our CI/CD pipelines.

The role requires deep hands-on experience with secure coding, testing tools, cloud security, and modern SDLC practices.