Senior App Security Engineer - AI/ML Focus (Remote)

Quanata's Veterans Job Board; United States; Remote; USD 232,000 - 379,000; Full time

Benefits offered by this job

Health insurance

Dental insurance

Vision insurance

Life insurance

401(k) with company match

Headspace app subscription

Monthly wellness allowance

Home office stipend $2K

Job summary

Quanata, LLC is seeking a Senior Application Security Engineer to partner with engineering teams, embedding security across the SDLC with a focus on AI/ML security considerations. You will guide product security, perform threat modeling, code reviews, and vulnerability remediation to strengthen secure development practices.

You will bridge frontend, backend, and API security while helping teams address complex risk and drive secure design decisions across the organization.

Qualifications

• Bachelor’s degree or equivalent relevant experience.
• 6–8 years of experience in application security or full-stack development with security expertise.
• Strong understanding of secure coding practices in Python, JavaScript/TypeScript, Node.js, and web standards.

Responsibilities

• Partner with product portfolio to manage product security and AI/ML security.
• Lead security design reviews and threat modeling for APIs, web features, and service integrations.
• Integrate SAST, SCA, and DAST into CI/CD pipelines and developer workflows.
• Review code and deployments to identify vulnerabilities and guide remediation with developers.
• Support secure development practices and maintain AppSec guidance across teams.

Skills

Python

JavaScript/TypeScript

Node.js

Web standards

OWASP Top 10

API security

SSRF

Code scanning tools

CodeQL

Wiz

SonarQube

Snyk

Reading complex codebases

Education

Bachelor’s degree or equivalent relevant experience

Tools

SAST

SCA

DAST

Job description

Quanata, LLC is seeking a Senior Application Security Engineer to partner with engineering teams, embedding security across the SDLC with a focus on AI/ML security considerations. You will guide product security, perform threat modeling, code reviews, and vulnerability remediation to strengthen secure development practices.

You will bridge frontend, backend, and API security while helping teams address complex risk and drive secure design decisions across the organization.