Remote Application Security Engineer — Shape Secure AI

Jump - Advisor AI; United States; On-site; USD 130,000 - 170,000; Full time

Benefits offered by this job

Remote-first work environment

Health benefits

Equity

Job summary

Jump - Advisor AI is seeking an Application & Product Security Engineer who will partner with engineering and product teams from design to deployment to embed security into every feature. This hands-on, high-ownership role operates in a remote-first setup across the US, with a focus on threat modeling, secure design reviews, and incident response.

You’ll build and maintain security tooling, review code, triage bug bounty findings, and contribute to secure-by-default patterns across our

Qualifications

• 2–4 years of experience in application security, product security, or a software engineering role with security responsibilities.
• Solid grasp of OWASP Top 10 and authn/authz flaws and how to prevent them in real codebases.
• Experience with threat modeling and secure design review, and ability to explain risk to engineers/PMs.
• Hands-on incident response experience—detecting, investigating or containing security events.
• Ability to read and write code (Python, TypeScript/JavaScript, Go) to review PRs and build small tools.
• Strong communication and collaboration skills to earn trust with engineers.
• Comfort with ambiguity and the ability to wear multiple hats.

Responsibilities

• Partner with product and engineering teams during design to identify risks and build security into new features.
• Lead threat modeling and secure design reviews for new products and architecture changes.
• Perform security-focused code reviews and help engineers fix vulnerabilities.
• Build and maintain application security tooling (SAST, dependency scanning, secrets detection) integrated into CI/CD.
• Participate in incident response: triage, investigate, contain, and post-incident learning.
• Triage findings from bug bounty reports, pen tests, and vulnerability scans; drive remediation with owning teams.
• Develop lightweight security guidance and easy-to-use secure-by-default patterns.

Skills

Application Security

Threat Modeling

Incident Response

Code Review

Python

TypeScript

JavaScript

Go

CI/CD

Security Tooling

Tools

SAST

Dependency Scanning

Secrets Detection

Job description

Jump - Advisor AI is seeking an Application & Product Security Engineer who will partner with engineering and product teams from design to deployment to embed security into every feature. This hands-on, high-ownership role operates in a remote-first setup across the US, with a focus on threat modeling, secure design reviews, and incident response.

You’ll build and maintain security tooling, review code, triage bug bounty findings, and contribute to secure-by-default patterns across our