Senior AppSec Engineer — AI-Driven SaaS Security Leader

Savvy Wealth; New York (NY); On-site; USD 150,000 - 210,000; Full time

Benefits offered by this job

Equity

Unlimited PTO

Medical/Dental/Vision

401(k) plan

NYC office

Lunch in office

Mental health care

Employee assistance program

Job summary

Savvy Wealth is seeking a Senior Application Security Engineer to join our NYC headquarters. This hands-on role focuses on identifying vulnerabilities, remediating them, and closing long-term gaps in our product and SaaS tools.

You’ll work with AI-enabled engineering, set security hygiene standards, and build guardrails for AI-assisted development, ensuring a secure path without sacrificing velocity. This role emphasizes practical, technical security work rather than compliance.

Qualifications

• 5+ years in security engineering, focused on application security
• Experience with modern AppSec toolchain and CI/CD integration
• Experience securing SaaS environments and cloud platforms

Responsibilities

• Own vulnerability management end to end across product, codebases, and cloud infra
• Build and operate AppSec tooling pipeline with CI/CD integration
• Set security hygiene standards including AI-generated code review
• Partner with AI team to design guardrails for safe AI-assisted development
• Secure the SaaS stack and review OAuth/third-party integrations
• Define access controls and cloud/SaaS baselines

Skills

Security engineering

Application security

CI/CD security

OAuth & SaaS security

Cloud security AWS/GCP

AI security guardrails

Communication

Technical writing

Education

BS in CS/Engineering

Tools

SAST tooling

SCA tooling

Secrets scanning

GitHub security

Job description

Savvy Wealth is seeking a Senior Application Security Engineer to join our NYC headquarters. This hands-on role focuses on identifying vulnerabilities, remediating them, and closing long-term gaps in our product and SaaS tools.

You’ll work with AI-enabled engineering, set security hygiene standards, and build guardrails for AI-assisted development, ensuring a secure path without sacrificing velocity. This role emphasizes practical, technical security work rather than compliance.