Application Security Engineer (X Money)

SpaceX Super Intelligence; New York (NY); On-site; USD 100,000 - 258,000; Full time

Benefits offered by this job

Equity

Medical, Vision & Dental

401(k) retirement plan

Disability & Life insurance

Employee discounts

Job summary

SpaceXSI, SpaceX's Super Intelligence division, seeks an Application Security Engineer to protect payments and wallets across the SDLC, focusing on code security and secure CI/CD pipelines for high-value financial systems.

You will collaborate with engineering teams, perform threat modeling, manage the bug bounty program, and help build agentic and LLM-based security solutions to detect and prevent fraud across cloud-native environments.

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, or a related field.
• 3–5 years of experience in application security with a focus on code security.
• Experience in payments, money transmission, digital wallets, or related platforms.
• Deep understanding of secure coding practices and OWASP Top 10.
• Proficiency in Python or Rust and secure coding practices in these languages.
• Experience securing CI/CD pipelines and DevSecOps practices.
• Familiarity with SBOM generation tools and software supply chain security.
• Experience with Burp Suite and OWASP ZAP and static/dynamic analysis.
• Experience securing high-value transaction systems and fraud controls.
• Experience designing agentic/LLM-based security solutions.
• Excellent communication skills.

Responsibilities

• Conduct in-depth code reviews and static analysis to mitigate vulnerabilities in financial applications.
• Design and implement secure coding guidelines for development teams.
• Collaborate with development teams to integrate security in the CI/CD pipeline.
• Perform threat modeling and risk assessments for payments, wallets, ledgers, and related surfaces.
• Manage vulnerability tracking and remediation guidance for engineering teams.
• Oversee the bug bounty program, including intake, triage, researcher communication, and disclosure.
• Support incident response activities related to application security.
• Stay current on emerging threats against financial and cloud-native systems.
• Evaluate and secure software supply chains, including SBOMs.
• Design and implement agentic and LLM-based security solutions.

Skills

Application security

Code security

CI/CD security

DevSecOps

Python

Rust

SBOM generation

Threat modeling

Vulnerability management

LLM-based security

Education

Bachelors degree in Computer Science or Cybersecurity

Tools

Burp Suite

OWASP ZAP

SBOM tooling

CI/CD tooling

AWS security tooling

Job description

SpaceX was founded under the belief that a future where humanity is out exploring the stars is fundamentally more exciting than one where we are not. Today, SpaceX is actively developing the technologies to make this possible, with the ultimate goal of making life multiplanetary and expanding consciousness to the stars.

SpaceXSI is building Super Intelligence to help humanity understand the universe. Our teams are building the full Super Intelligence stack: from our Colossus supercomputers, to Grok models, to our suite of applications, including Grok Bot, Grok Build, Grok Imagine, Grok Voice, and X. We're creating a powerful flywheel where more compute trains better models, better models power more useful products, and what we learn from people using those products shapes what we build next.

ABOUT THE ROLE

We are seeking a skilled and innovative Application Security Engineer to join X Money. In this role, you will protect the security and integrity of our payments and financial products throughout the software development lifecycle, with a particular focus on code security, CI/CD pipelines, and systems that move and hold customer funds. Experience securing fintech, payments, digital wallet, ledger, or similar high-value platforms, where fraud, abuse, and unauthorized transfers are a constant concern, is strongly preferred.

RESPONSIBILITIES

• Conduct in-depth code reviews and static analysis to identify and mitigate security vulnerabilities in financial applications
• Design and implement secure coding guidelines and best practices for development teams
• Collaborate closely with development teams to integrate security practices throughout the CI/CD pipeline
• Perform threat modeling and risk assessments for payments, wallets, ledgers, and related product surfaces, and develop mitigation strategies for fraud, abuse, and unauthorized movement of funds or credits
• Manage vulnerability tracking and remediation efforts, providing guidance to development teams
• Manage the bug bounty program, including intake, triage, researcher communication, and coordinated disclosure
• Support incident response activities related to application security
• Stay current on emerging threats against financial and cloud-native systems, and continuously strengthen our controls
• Evaluate and secure software supply chains, including producing and maintaining Software Bills of Materials (SBOMs)
• Design and implement agentic and LLM-based solutions that help detect, investigate, or prevent security problems

BASIC QUALIFICATIONS

• Bachelor's degree in Computer Science, Cybersecurity, or a related field
• 3-5 years of experience in application security, with a strong focus on code security practices
• Experience in payments, money transmission, digital wallets, or related financial platforms
• Deep understanding of secure coding practices, application security frameworks, and common vulnerabilities (e.g., OWASP Top 10)
• Proficiency in Python or Rust and experience with secure coding practices in these languages
• Experience securing CI/CD pipelines and implementing DevSecOps practices
• Familiarity with software supply chain security and SBOM generation tools
• Experience with security testing tools (e.g., Burp Suite, OWASP ZAP) and static/dynamic code analysis
• Experience securing payments, wallets, ledgers, or other high-value transaction systems, including controls against fraud, abuse, and integrity issues
• Experience designing and implementing agentic and LLM-based solutions for security problems
• Excellent communication skills, able to explain complex security issues to both technical and non-technical audiences

PREFERRED SKILLS AND EXPERIENCE

• Hands-on experience securing applications on AWS; familiarity with other cloud platforms is a plus
• Relevant security certifications (e.g., BSCP, OSCP, OSWE)
• Experience managing bug bounty programs
• Background in data privacy and compliance relevant to financial products and cloud-native applications
• Experience with GitOps and infrastructure-as-code security
• Experience building custom security tooling to enhance and automate security processes
• Contributions to open-source security projects or tools

COMPENSATION AND BENEFITS

$100,000 - $258,000 USD

Base salary is just one part of our total rewards package at SpaceXSI, which also includes equity, comprehensive medical, vision, and dental coverage, access to a 401(k) retirement plan, short & long-term disability insurance, life insurance, and various other discounts and perks.

ITAR REQUIREMENTS

• To conform to U.S. Government export regulations, applicant must be a (i) U.S. citizen or national, (ii) U.S. lawful, permanent resident (aka green card holder), (iii) Refugee under 8 U.S.C. Section 1157, or (iv) Asylee under 8 U.S.C. Section 1158, or be eligible to obtain the required authorizations from the U.S. Department of State. Learn more about the ITARhere.

SpaceXSI is an equal opportunity employer. For details on data processing, view our Recruitment Privacy Notice.