Remote Application Security Engineer - Secure SDLC

Partner Company; United States; A distancia; USD 175.000 - 230.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

401(k) match

Medical/dental/vision insurance

Flexible PTO

Global parental leave

Learning stipend

Remote-work support

Office setup stipend

Descripción de la vacante

Partner Company, a remote-first fintech protecting payment infrastructure, is seeking an Application Security professional with 3–5+ years of experience to shape security practices across the software development lifecycle and collaborate with Security and Engineering teams.

You will automate security controls with SAST, DAST, and SCA in CI/CD, manage the bug bounty program, deliver secure coding training, and promote security awareness while supporting a fast-moving, globally distributed team.

Formación

• 3–5+ years of dedicated experience in Application Security and/or full-stack development.
• Experience reviewing Java and Python applications for security vulnerabilities.
• Familiarity with SAST/DAST integration, bug bounty programs, and threat modeling methodologies.

Responsabilidades

• Shape application security practices and integrate automated safeguards throughout the SDLC.
• Collaborate with Security and Engineering teams to identify vulnerabilities early and improve secure development.
• Automate security controls by integrating SAST, DAST, and SCA into CI/CD pipelines.
• Develop secure SDLC practices, manage the bug bounty program, and deliver secure coding training.
• Conduct application security reviews and promote security awareness across the organization.

Conocimientos

Application Security

Full-Stack Development

Vulnerability Review (Java/Python)

SAST/DAST integration

Herramientas

SAST

DAST

SCA

Descripción del empleo

Partner Company, a remote-first fintech protecting payment infrastructure, is seeking an Application Security professional with 3–5+ years of experience to shape security practices across the software development lifecycle and collaborate with Security and Engineering teams.

You will automate security controls with SAST, DAST, and SCA in CI/CD, manage the bug bounty program, deliver secure coding training, and promote security awareness while supporting a fast-moving, globally distributed team.