Remote Senior AppSec Engineer - SDLC & Threat Modeling

Mitek Systems; United States; Remote; USD 140,000 - 190,000; Full time

Benefits offered by this job

AppSec ownership

Competitive compensation

Security-focused culture

Security training & runbooks

Stock plan participation

Job summary

Mitek is seeking a seasoned AppSec Engineer to serve as the company’s technical authority on software security. You will bridge Information Security and Engineering, embed security into the SDLC for ~50 developers, own vulnerability remediation, and build upstream controls to prevent vulnerabilities.

You will lead security reviews, drive secure design, and coordinate penetration-testing cycles with testers. Strong emphasis on OWASP Top 10, API security, and secure coding practices.

Qualifications

• Knowledge,skillsand abilities typically gained through5–8 years in application/product security or security-focused software engineering
• Application penetration testing including business-logic and API testing
• Hands-on SAST, DAST, and SCA tuning and operationalization
• Secure code review across at least two web-application languages
• Threat modeling using STRIDE, PASTA, or equivalent
• Depth in OWASP Top 10 and API security risks; ability to influence development teams

Responsibilities

• Vulnerability Remediation - Own the application vulnerability remediation program with prioritized developer guidance and clear SLAs
• Secure Development Lifecycle - Define and own the SDLC — security gates and review checkpoints in sprint and release processes
• Threat Modeling & Secure Design - Threat-model new features and architectural changes before code is written
• API Security & Secure Code Review - Own API security standards — OAuth 2.0, mTLS, rate limiting, and abuse prevention
• Developer Enablement - Build and run a Security Champions program across development squads, deliver training and runbooks

Skills

Application security

Penetration testing

Threat modeling

Secure SDLC

API security

OWASP Top 10

Tools

SAST tooling

DAST tooling

SCA tooling

Job description

Mitek is seeking a seasoned AppSec Engineer to serve as the company’s technical authority on software security. You will bridge Information Security and Engineering, embed security into the SDLC for ~50 developers, own vulnerability remediation, and build upstream controls to prevent vulnerabilities.

You will lead security reviews, drive secure design, and coordinate penetration-testing cycles with testers. Strong emphasis on OWASP Top 10, API security, and secure coding practices.