Lead App Security Engineer: Threat Modeling & SDLC

Apply; Northern (KY); Hybrid; USD 120,000 - 180,000; Full time

Job summary

TRM Labs is seeking an experienced Application Security Engineer to build mission-critical security for our AI-powered platforms. You will lead reviews, threat modeling, secure code practices, and work closely with engineering leadership to raise the bar for protection across products.

You will drive automated testing, manage vulnerability programs, and mentor developers with secure coding training across multiple time zones in a distributed team.

Qualifications

• BS or equivalent in CS/Engineering or related field.
• 8+ years of experience in software development and testing.
• Proficiency in Python, NodeJS, and React.
• Strong knowledge of encryption, authentication, and authorization.
• Experience with OWASP/CWE and security testing methodologies.

Responsibilities

• Lead app security reviews and threat modeling across products.
• Develop automated security testing and mature our Secure SDLC.
• Manage application security vulnerability program and remediation.
• Coordinate penetration testing engagements.
• Create security best practices for engineers and product teams.
• Maintain bug bounty program and security training.

Skills

Python

NodeJS

React

Security testing

Threat modeling

CI/CD security

OWASP/CWE

AWS

GCP

BurpSuite

OWASP ZAP

Threat Dragon

Red Teaming

Communication

Education

BS in Computer Science/Engineering or related field

Tools

GitHub Advanced Security

SAST

DAST

SCA tools

BurpSuite

OWASP ZAP

Job description

TRM Labs is seeking an experienced Application Security Engineer to build mission-critical security for our AI-powered platforms. You will lead reviews, threat modeling, secure code practices, and work closely with engineering leadership to raise the bar for protection across products.

You will drive automated testing, manage vulnerability programs, and mentor developers with secure coding training across multiple time zones in a distributed team.