Senior AppSec Engineer — AI-Driven SaaS Security Leader

savvy; New York (NY); On-site; USD 150,000 - 210,000; Full time

Benefits offered by this job

Competitive salary and equity package

Unlimited PTO + holidays

Medical, dental, and vision plans

401(k) and health savings account

Job summary

Savvy Wealth in NYC seeks a Senior Application Security Engineer to join our first dedicated security hire. This hands-on role enforces security hygiene, implements guardrails for AI-assisted development, and partners with the CTO and IT leadership to close vulnerabilities across product, codebases, and cloud infrastructure.

You will own vulnerability management end to end, build our AppSec tooling, set standards for code review, and collaborate with internal AI teams to keep velocity and safety

Qualifications

• 5+ years of hands-on security engineering experience in application or product security.
• Strong software engineering fundamentals; able to read, write, and remediate code.
• Proven track record enforcing security across technical and non-technical teams.
• Experience embedding security into existing workflows.
• Deep experience with AppSec toolchain: secrets scanning, SCA, SAST, CI/CD security integration (GitHub-centric).
• Practical experience securing SaaS environments: OAuth & third-party app review, configuration hardening, least-privilege access.

Responsibilities

• Own vulnerability management end to end across product, codebases, and cloud (AWS, GCP, Cloudflare).
• Build and operate AppSec tooling pipeline (secrets scanning, SCA, SAST, CI/CD).
• Set and enforce security hygiene standards within codebases, including AI-generated code review."
• Partner with AI team to design guardrails for AI-assisted development and secure defaults.
• Secure the SaaS stack: review OAuth grants, third-party integrations, and misconfiguration risk.
• Help establish conditional access and identity controls with IT (SSO, MFA, device posture).
• Define cloud/SaaS configuration baselines for our footprint.
• Contribute to detection and response readiness and participate in incident response as needed.
• Work cross-functionally with Engineering, IT, and AI teams; communicate risk and roadmaps clearly.

Skills

Security engineering

Software fundamentals

AppSec tooling

SaaS security

Cloud security

AI security

Communication

Independent work

Tools

Secrets scanning

SCA

SAST

CI/CD security

GitHub

Job description

Savvy Wealth in NYC seeks a Senior Application Security Engineer to join our first dedicated security hire. This hands-on role enforces security hygiene, implements guardrails for AI-assisted development, and partners with the CTO and IT leadership to close vulnerabilities across product, codebases, and cloud infrastructure.

You will own vulnerability management end to end, build our AppSec tooling, set standards for code review, and collaborate with internal AI teams to keep velocity and safety