Senior App Security Engineer - Secure SDLC & Cloud Defense

TEEMA; San Francisco (CA); On-site; USD 207,000 - 344,000; Full time

Job summary

TEEMA in San Francisco seeks an App Sec Engineer to own the secure SDLC end-to-end. You will model threats, review designs and code, and coordinate internal and external pentests to drive findings to closure.

You will build SAST/DAST/SCA tooling integrated with CI/CD, remediate vulnerabilities across bug bounty programs and internal scans, and mentor engineers on secure coding practices while shaping the security roadmap.

Qualifications

• 4+ years in application security or software security engineering.
• Ability to write production-grade code and produce actionable findings.
• Deep knowledge of OAuth 2.0, OIDC, SAML, and session management.
• Experience with AWS and containerized environments (Kubernetes, Docker).

Responsibilities

• Own the secure SDLC end-to-end: threat modeling, design reviews, code reviews.
• Run and coordinate app pentests and drive findings to closure.
• Build and own SAST/DAST/SCA tooling wired into CI/CD for secure delivery.
• Triage and remediate vulnerabilities from various sources.

Skills

Production code

OAuth 2.0

OIDC

SAML

AWS

Kubernetes

Docker

Tools

Go

TypeScript

React

PostgreSQL

Redis

GraphQL

Job description

TEEMA in San Francisco seeks an App Sec Engineer to own the secure SDLC end-to-end. You will model threats, review designs and code, and coordinate internal and external pentests to drive findings to closure.

You will build SAST/DAST/SCA tooling integrated with CI/CD, remediate vulnerabilities across bug bounty programs and internal scans, and mentor engineers on secure coding practices while shaping the security roadmap.