Senior Application Security Engineer (Fully Remote)

Null; United States; Remote; USD 150,000 - 230,000; Full time

Job summary

Unknown company is seeking an experienced engineer to contribute production-quality code in Node.js and Python, shipping security fixes and hardening features end-to-end.

The role includes building AI-powered automation to reduce manual security work and managing a bug bounty program from submission to closure in a fast-growing SaaS environment.

Qualifications

• 6+ years of hands-on software development and/or application security experience.
• Proficiency in Node.js and Python, with a track record of shipping production-quality security fixes.
• Experience with Terraform and AWS, covering infrastructure as code and cloud security.

Responsibilities

• Contribute production-quality code directly to the application (Node.js and Python).
• Build AI-powered automation to eliminate manual security work, such as PR analysis and vulnerability triage.
• Manage a bug bounty program end-to-end, evaluating submissions and shipping fixes.

Skills

Software development

Application security

Tools

Node.js

Python

Terraform

AWS

Job description

• Contribute production-quality code directly to the application (Node.js and Python), shipping security fixes and hardening features end-to-end.
• Build AI-powered automation to eliminate manual security work, such as pull request analysis and vulnerability triage.
• Manage a bug bounty program end-to-end, evaluating and reproducing submissions and closing findings by shipping the fixes yourself.

Requirements:

• 6+ years of hands-on software development and/or application security experience.
• Proficiency in Node.js and Python, with a track record of shipping production-quality security fixes.
• Experience with Terraform and AWS, covering infrastructure as code and cloud security.

Compensation & Location:

• The compensation range is $150,000 to $230,000 USD annually.
• Fully remote, open to candidates based in Canada or the United States.

Fast-growing B2B SaaS company serving the life sciences and pharma space. A small, high-impact security team with an engineering-first mindset, building AI-native features.