Senior AppSec Engineer – AI-Driven Secure Coding

Upside; Washington (Washington County); Hybrid; USD 210,000 - 230,000; Full time

Benefits offered by this job

Medical/Dental/Vision

Equity

401(k)

Family planning & parental leave

Flexible work environment

Lunch reimbursement

Employee Resource Groups

Learning stipend

Transparent culture

Mission-driven

Job summary

Upside is hiring a security-focused software professional to drive application security and secure coding practices across our platform. You will work with the Director of Information Security and partner with engineering teams to reduce vulnerabilities and strengthen our AppSec posture.

You will run SAST/SCA tests, create threat models, and mentor engineers on secure design and coding. Hybrid work in the US with strong collaboration across security and product teams.

Qualifications

• 6+ years of application or product security including Python code review.
• Experience delivering vulnerability management solutions.
• Deep knowledge of AWS and Lambda security architecture and AWS Control Tower.
• Strong understanding and adoption of AI technologies.
• Bachelor’s degree in CS or Engineering preferred.
• Exceptional customer service and people skills.

Responsibilities

• Innovate with AI and deliver security solutions to mitigate application vulnerabilities.
• Run security code tests (SAST, SCA) and partner with engineers to remediate unsafe code.
• Create threat models and review/document risks with technology teams.
• Guide leadership on security architecture, design and AppSec best practices.
• Train engineers on safe coding and vulnerability management.
• Assist penetration testing initiatives and manage bug bounties.
• Support administration of AWS Control Tower and IAM provisioning.
• Interact with the security community and stay updated on trends.

Skills

AppSec experience

Python code review

AWS security

SAST

SCA

Threat modeling

AI security

Customer service

Education

Bachelor’s degree in Computer Science or Engineering

Tools

Github Advanced Security

Python

Terraform

AWS Lambda

DynamoDB

S3

SNS

SQS

IAM

VPCs

ChatGPT

Snowflake

SQL

Job description

Upside is hiring a security-focused software professional to drive application security and secure coding practices across our platform. You will work with the Director of Information Security and partner with engineering teams to reduce vulnerabilities and strengthen our AppSec posture.

You will run SAST/SCA tests, create threat models, and mentor engineers on secure design and coding. Hybrid work in the US with strong collaboration across security and product teams.