Senior Application Security Engineer: Build Secure by Design

BioRender

San Francisco (CA)

On-site

USD 180,000 - 260,000

Full time

36 hours ago

Be an early applicant

Get a reply from this employer

Your resume and cover letter, tailored to exactly what they’re hiring for.

Get past ATS filters

Job summary

BioRender is seeking a Senior Application Security Engineer to join the Security team. You will contribute production code, build secure-by-design patterns, and drive CI/CD security integrations across AWS, Terraform, and Cloudflare.

You’ll work with Node.js/React and Python, shaping threat modeling, SAST/DAST, and secure SDLC practices. You’ll also lead security reviews of RFCs, perform penetration testing, and help secure AI-powered features, while collaborating with engineers to ship fixes

Qualifications

Demonstrated software engineering ability with production code in Node.js/React; Python a plus.
Fluency using AI development tools to accelerate security workflows and code reviews.
Expertise in web application security and secure-coding best practices, including CI/CD integration.

Responsibilities

Contribute production-quality code to the application and infrastructure.
Build and maintain security and CI/CD tooling for automation.
Act as a security reviewer on RFCs and design documents; pair with engineers to remediate issues at the source.
Define secure-by-design patterns for authentication, authorization, and API security.
Lead threat modeling and evolve the Secure SDLC and CI/CD security integrations.
Perform penetration testing and code reviews (Node.js/React) following OWASP.