Hands-On App & Product Security Engineer (Remote)

F-Prime Capital; United States; On-site; USD 130,000 - 170,000; Full time

Benefits offered by this job

Equity

Remote-first environment

Health, dental, vision coverage

Flexible PTO

Job summary

Jump is seeking an Application & Product Security Engineer to partner with engineering and product teams from earliest design conversations to build security into what we ship. This hands-on, high-ownership role blends threat modeling, secure design reviews, and security tooling across our CI/CD pipeline.

You'll also triage incidents, respond to security findings, and create practical guidance to help engineers ship safer software. Strong coding ability and collaboration are essential.

Qualifications

• 2–4 years of experience in application security, product security, or a software engineering role with significant security responsibilities.
• Solid grasp of OWASP Top 10, authn/authz flaws, injection, SSRF and how to prevent them in real codebases.
• Experience with threat modeling and secure design review, and the ability to explain risk to engineers and PMs.
• Hands‑on incident response experience — helped detect, investigate, or contain real security events.
• Ability to read and write code (e.g., Python, TypeScript/JavaScript, Go) well enough to review PRs and build small tools.
• Strong communication and collaboration skills — you build trust with engineers.

Responsibilities

• Partner with product and engineering teams during design to identify risks early and build security into new features from the start.
• Lead threat modeling and secure design reviews for new products and architecture changes.
• Perform security-focused code reviews and help engineers fix vulnerabilities.
• Build and maintain application security tooling (SAST, dependency scanning, secrets detection) integrated into CI/CD.
• Participate in incident response: triage, investigate, contain, and drive post-incident learning.
• Triage findings from bug bounty reports, pen tests, and vulnerability scans, and drive remediation with owning teams.
• Develop lightweight security guidance, paved-road patterns, and training that make secure ways the easy way.
• Wear multiple hats — from security questionnaires to cloud and corporate security improvements.

Skills

Threat modeling

Incident response

Code review

Security communication

Tools

SAST

Dependency scanning

Secrets detection

CI/CD tooling

Job description

Jump is seeking an Application & Product Security Engineer to partner with engineering and product teams from earliest design conversations to build security into what we ship. This hands-on, high-ownership role blends threat modeling, secure design reviews, and security tooling across our CI/CD pipeline.

You'll also triage incidents, respond to security findings, and create practical guidance to help engineers ship safer software. Strong coding ability and collaboration are essential.