Senior App Security Engineer – Threat Modeling & Secure SDLC

Openkrill; United States; Remote; USD 140,000 - 210,000; Full time

Benefits offered by this job

Travel covered for in-person weeks

Job summary

TRM Labs is seeking an experienced Application Security Engineer to design and enforce security controls across our product suite. You will lead secure code reviews, threat modeling, and vulnerability management while collaborating with engineering leadership to raise security standards.

You will drive automated security testing, contribute to the Secure SDLC, and support product teams with secure coding practices. Remote-friendly with in-person collaboration during R&D weeks as required.

Qualifications

• 8+ years in software development and testing.
• BS in Computer Science, Computer Engineering, or related field.
• Strong knowledge of Python, NodeJS and React.
• Experience with cloud providers (GCP/AWS) and secure SDLC.

Responsibilities

• Lead application security reviews and threat modeling across products.
• Develop automated security testing and mature Secure SDLC practices.
• Own vulnerability management and remediation workflows.
• Coordinate penetration testing engagements and triage findings.
• Support engineers with secure coding best practices.
• Develop and maintain bug bounty program.
• Drive platform security initiatives and security champion programs.
• Foster a culture of security within engineering teams.

Skills

Python

NodeJS

React

OWASP

Threat modeling

SAST/DAST tools

Cloud security (GCP/AWS)

Code reviews

Security testing

BurpSuite/OWASP ZAP

Education

BS in CS/CE or related field

Tools

Github Advanced Security

Security tooling

Job description

TRM Labs is seeking an experienced Application Security Engineer to design and enforce security controls across our product suite. You will lead secure code reviews, threat modeling, and vulnerability management while collaborating with engineering leadership to raise security standards.

You will drive automated security testing, contribute to the Secure SDLC, and support product teams with secure coding practices. Remote-friendly with in-person collaboration during R&D weeks as required.