Remote Application Security Engineer | AppSec & Automation

MyFitnessPal, Inc.; Northern (KY); Hybrid; USD 90,000 - 120,000; Full time

Benefits offered by this job

Healthcare benefits

401(k) plan and match

Wellness allowance

Mentorship program

Job summary

MyFitnessPal, Inc. is seeking a Security Engineer II focused on application security to own the vulnerability management program and partner with product teams. You will triage findings from SAST/DAST/SCA, drive remediation, and build automation to streamline security across the SDLC.

The role emphasizes hands-on work with security tooling, CI/CD, and development processes. You’ll collaborate with the PEAS and TechOps teams, leverage AI-assisted workflows, and contribute to secure coding

Qualifications

• 2-4 years of security engineering experience or closely related role.
• Knowledge of SAST/DAST/SCA and remediation steps.
• Understanding secure development for web and mobile apps (OWASP Top 10/MASVS).
• Experience with AI/agentic tooling and security workflows.
• Experience vulnerability triage, remediation guidance, and communication to engineers.
• Familiarity with cloud-native microservices (containers, Kubernetes, IaC).
• Strong written and verbal communication; ability to create developer-facing docs.

Responsibilities

• Own day-to-day application security vulnerability management.
• Triage findings from SAST, SCA, DAST, and mobile tooling; assign severity and due dates.
• Drive remediation tickets through the SVM process to resolution.
• Operate and grow the bug bounty program; scope engagements and triage submissions.
• Build and maintain security automation (SOAR, Python) and metrics reporting.
• Partner with product engineering on remediation discussions and risk-based guidance.
• Review security of new features, services, and third-party integrations.
• Advocate secure coding practices and contribute to security training.

Skills

Security engineering

Application security

SAST/DAST/SCA

CI/CD automation

Python

Bug bounty

AI tooling

Education

BS in Computer Science or IS related field

Tools

Kubernetes

GitHub Actions

SOAR

Claude Code

Job description

MyFitnessPal, Inc. is seeking a Security Engineer II focused on application security to own the vulnerability management program and partner with product teams. You will triage findings from SAST/DAST/SCA, drive remediation, and build automation to streamline security across the SDLC.

The role emphasizes hands-on work with security tooling, CI/CD, and development processes. You’ll collaborate with the PEAS and TechOps teams, leverage AI-assisted workflows, and contribute to secure coding