Remote Senior AppSec Engineer – AI/ML Focus

FarCoder; Northern (KY); Remote; USD 232,000 - 379,000; Full time

Benefits offered by this job

Health insurance

401(k) match

Remote-first culture

Home office stipend

Paid time off (PTO)

Parental leave

Learning budget

LinkedIn Learning access

BetterUp coaching

MacBook Pro provided

One-time home office setup $2K

Job summary

Quanata, a remote-first security-focused company, seeks a Senior Application Security Engineer to embed security across web and backend development. You will guide product security with emphasis on AI/ML security considerations and collaborate with data science teams to address risks early in the SDLC.

You will work closely with engineering teams to perform threat modeling, code reviews, and remediation, strengthening secure development practices and integrating security tooling into CI/CD

Qualifications

• Bachelor’s degree or equivalent relevant experience.
• 6–8 years of experience in application security or full-stack development with security expertise.
• Strong understanding of secure coding practices in Python, JavaScript/TypeScript, Node.js, and web standards.
• Familiarity with OWASP Top 10 (web and GenAI LLM), API security, SSRF, and related security concerns.
• Experience with code scanning tools such as CodeQL, Wiz, SonarQube, or Snyk.

Responsibilities

• Partner with a product portfolio to manage product security, with a strong emphasis on AI/ML automation, security consulting and cross-functional collaboration with non-portfolio teams.
• Lead security design reviews and threat modeling for APIs, web features, and service integrations.
• Integrate security tooling—including SAST, SCA, and DAST—into CI/CD pipelines and developer workflows.
• Review source code and deployment configurations to identify security vulnerabilities, and partner with developers to triage, remediate, and validate findings.
• Support secure development practices across engineering teams, including maintaining AppSec guidance and contributing to security awareness and enablement.
• Develop and deploy AppSec automation and integrations, utilizing AI/ML as possible, including ASVS scanning and Burp Suite Enterprise.
• Support application security integration reviews, SaaS security assessments, and open-source software reviews.
• Participate in cross-functional incident response and remediation planning.

Skills

JavaScript

TypeScript

Node.js

GraphQL

CI/CD

Python

Education

Bachelor's degree or equivalent

Tools

CodeQL

Wiz

SonarQube

Snyk

Job description

Quanata, a remote-first security-focused company, seeks a Senior Application Security Engineer to embed security across web and backend development. You will guide product security with emphasis on AI/ML security considerations and collaborate with data science teams to address risks early in the SDLC.

You will work closely with engineering teams to perform threat modeling, code reviews, and remediation, strengthening secure development practices and integrating security tooling into CI/CD