Senior App Sec Engineer - Lead Secure AI Apps (Remote)

Socket.dev; Northern (KY); Hybrid; USD 167,000 - 231,000; Full time

Benefits offered by this job

Competitive compensation

Annual equity grants

401(k) with company match

Employee Stock Purchase Plan (ESPP)

Comprehensive health coverage

HSA contributions

Paid time off and holidays

Paid family and parental leave

Onsite team events

Job summary

Upstart’s Application Security team enables product and engineering to build secure products without slowing innovation. As a Senior Application Security Engineer, you will lead security initiatives, partner with cross-functional teams, and drive durable improvements to raise the security bar.

You will protect customer-facing products, internal apps, APIs, and AI-enabled systems while maintaining a positive developer experience. The role requires senior expertise and collaboration across teams.

Qualifications

• 5+ years in security or software engineering or related technical role, incl. 2+ years in application/product security.
• Experience leading security projects with multiple contributors or partner teams.
• Experience conducting threat modeling and security architecture reviews for complex prod apps.
• Experience developing production software or security automation in Java, Python, Ruby, Go, or similar language.
• Experience designing or implementing application security controls across the software dev lifecycle.

Responsibilities

• Lead application security projects from planning through implementation, coordinating contributors and dependencies to deliver high-quality outcomes.
• Conduct threat modeling and security architecture reviews for complex customer-facing applications, APIs, distributed services, and AI/ML systems.
• Design and implement secure-by-default controls across the software development lifecycle, including secure coding standards, API protections, automated testing, CI/CD safeguards, and secrets management.
• Partner with engineering teams to identify systemic vulnerabilities, evaluate remediation options, and ensure high-risk issues are resolved.
• Build services and automation that improve vulnerability detection, prioritization, validation, and prevention while reducing friction for developers.
• Assess security of AI-enabled products and developer workflows, incl. GenAI integrations, model inputs/outputs, sensitive data handling, and access boundaries.
• Provide technical leadership during high-severity incidents, determine root causes, and drive follow-up improvements.
• Contribute to design/code reviews, document reusable patterns, mentor engineers, and strengthen app security practices.

Skills

Security engineering

Project leadership

Threat modeling

Security automation

Cloud security

Tools

Java

Python

Ruby

Go

Job description

Upstart’s Application Security team enables product and engineering to build secure products without slowing innovation. As a Senior Application Security Engineer, you will lead security initiatives, partner with cross-functional teams, and drive durable improvements to raise the security bar.

You will protect customer-facing products, internal apps, APIs, and AI-enabled systems while maintaining a positive developer experience. The role requires senior expertise and collaboration across teams.