Remote Senior App Security Engineer AI & Pentest Lead

Forward Financing; United States; On-site; USD 143,000 - 183,000; Full time

Benefits offered by this job

Medical

Dental

Vision

Commuter benefits

Flexible time-off policy

Paid parental leave

401k match for US employees

Wellness reimbursement

Volunteering days

Annual professional development budget

Charitable donation match

Job summary

Forward Financing seeks a Senior Application Security Engineer to identify and remediate vulnerabilities in our software, including AI-driven components. You will perform manual pentests, code reviews, and build AI-assisted tooling to accelerate security testing.

You will work in a remote-first environment with flexible hours, influence security testing standards, and help safeguard fintech products that power small businesses across the U.S. and beyond.

Qualifications

• Bachelor's degree in Computer Science or equivalent.
• 5+ years in application security or related field.
• Hands-on pentesting across web apps, APIs, and AWS.

Responsibilities

• Conduct manual penetration tests against our systems and build AI-assisted tooling that extends testing range.
• Define how we pentest AI and test LLM applications, agents, and agent-generated code.
• Triage findings from SAST; fix true vulnerabilities and tune false positives.
• Perform secure code reviews across web applications, APIs, and AWS infrastructure.
• Build tooling and security services within the Forward application stack, including AI-assisted tooling.
• Support the test-to-production review to ensure AI-built work is security-reviewed before promotion.
• Explain risk to engineers so they can prioritize and fix what you found.

Skills

Application security

Pentesting

AI/LLM security

Ruby/Python/TypeScript/Go

Risk communication

Education

Bachelor's Degree in Computer Science or equivalent

Tools

AWS

OSCP/OSWE

Bug bounty programs

Job description

Forward Financing seeks a Senior Application Security Engineer to identify and remediate vulnerabilities in our software, including AI-driven components. You will perform manual pentests, code reviews, and build AI-assisted tooling to accelerate security testing.

You will work in a remote-first environment with flexible hours, influence security testing standards, and help safeguard fintech products that power small businesses across the U.S. and beyond.