Remote Senior AppSec Engineer — Automate & Secure

VulnU; United States; Remote; USD 135,000 - 180,000; Full time

Benefits offered by this job

Generous compensation and equity

Remote-first / work from anywhere

Flexible PTO and year-end break

Health, dental, and vision for depend-

401k matching

Home office setup stipend

Monthly meal stipend

Annual learning stipend

Job summary

Sardine is seeking a Senior Application Security Engineer to help secure our fraud platform. You will own vulnerability management, perform threat modeling, and automate the security pipeline across Go, Node.js, Python, Ruby, and Java services in multi-cloud environments.

You will triage findings from SAST, DAST, SCA, pen tests, and bug bounty, write custom static analysis rules, review authorization controls, and collaborate with engineers across time zones in a fully distributed, remote-first

Qualifications

• Vulnerability management end-to-end with automation.
• Engineering background; able to read and review real software.
• Ownership to done across teams; follow up on fixes.
• Judgment over tenure; depth of knowledge matters more than years.
• Code auditing in Go, Python, Node.js, Ruby or Java.
• Practical command of OWASP Top 10, with focus on broken access control.
• SAST, DAST, SCA in CI/CD; cloud fundamentals on AWS/GCP.
• Docker and Kubernetes; asynchronous collaboration across time zones.

Responsibilities

• Run and automate the vulnerability pipeline across sources.
• Triage, validate, route, and drive remediation of findings.
• Build automation to remove manual effort from remediation steps.
• Direct external pentests and bug bounty scope; judge severity; close loop.
• Review platform controls and push owners to fix gaps with evidence.

Skills

Vulnerability management

Code auditing

Go

Python

Java

Node.js

Ruby

AWS

GCP

Docker

Kubernetes

SAST/DAST/SCA

PCI DSS / SOC 2

Bug bounty / pentesting

Education

Engineering degree or equivalent

Tools

Semgrep

CodeQL

CI/CD tooling

Job description

Sardine is seeking a Senior Application Security Engineer to help secure our fraud platform. You will own vulnerability management, perform threat modeling, and automate the security pipeline across Go, Node.js, Python, Ruby, and Java services in multi-cloud environments.

You will triage findings from SAST, DAST, SCA, pen tests, and bug bounty, write custom static analysis rules, review authorization controls, and collaborate with engineers across time zones in a fully distributed, remote-first