Senior AppSec Engineer — AI-Driven Pentester (Remote)

Forward Financing; Boston, Northern (MA, KY); Hybrid; USD 145,000 - 183,000; Full time

Benefits offered by this job

Medical, dental, vision

Commuter benefits

Flexible time-off

Parental leave

401k match

Wellness reimbursement

Professional development budget

Volunteer days

Donation match

Remote-first with office options

Job summary

Forward Financing, a Boston-based fintech, is hiring a Senior Application Security Engineer to find vulnerabilities in core software and AI systems, and to shape how we test AI-built code.

You will conduct manual pentests, build AI-assisted tooling, review code across web apps, APIs, and AWS, and explain risk to engineers to drive secure delivery.

The role offers remote-first flexibility with the option to work from home or in the office, and competitive compensation with a 10% annual bonus.

Qualifications

• 5+ years in application security, offensive security, or product security.
• Hands-on pentesting and code-review depth across web applications, APIs, and cloud infrastructure (AWS).
• A hacker mentality with curiosity about how systems break and how to investigate beyond scanners.
• Interest in using AI to solve problems in workflows and testing.
• Understanding of AI/LLM attack surface: prompt injection and insecure agent tool use.
• Experience with Ruby, Python, TypeScript, or Go, and secure SDLC practices.
• Ability to communicate risk and priorities to engineers.

Responsibilities

• Conduct manual penetration tests against systems and AI-enabled components.
• Triage findings from SAST tools, fix real vulnerabilities, and tune false positives.
• Perform secure code reviews across web apps, APIs, and AWS infrastructure.
• Build tooling and security services within the Forward application stack, including AI-assisted tooling.
• Support the test-to-production review process to ensure AI-built work is security-reviewed.
• Explain risk to engineers to help them prioritize fixes.

Skills

Application security

Pentesting

Code review

AI testing

AWS

Ruby

Python

TypeScript

Go

Education

Bachelor's degree in Computer Science or equivalent

OSCP/OSWE (nice to have)

Tools

AWS

Job description

Forward Financing, a Boston-based fintech, is hiring a Senior Application Security Engineer to find vulnerabilities in core software and AI systems, and to shape how we test AI-built code.

You will conduct manual pentests, build AI-assisted tooling, review code across web apps, APIs, and AWS, and explain risk to engineers to drive secure delivery.

The role offers remote-first flexibility with the option to work from home or in the office, and competitive compensation with a 10% annual bonus.