Senior AppSec Engineer – Architect Secure Trading Platform

fomo; New York (NY); On-site; USD 180,000 - 260,000; Full time

Benefits offered by this job

Health insurance

Equity

401(k) with match

Flexible time off

Annual offsites

Job summary

fomo is hiring a Staff Security Engineer to own and elevate our application security program. This hands-on role acts as the technical authority on secure software, collaborating with engineering to identify and fix vulnerabilities, and to shape security at architecture and code levels.

You will focus on product and application security, embedding with the product teams to secure design, development, and shipping processes while guiding security tooling and incident response activities.

Qualifications

• 7+ years in security engineering with recent focus on application security.
• Deep hands-on experience in secure code review and threat modeling.
• Strong software engineering background and ability to read/write production code.
• Experience building and scaling AppSec tooling and processes in a growing company.

Responsibilities

• Lead security architecture reviews and threat modeling for new features and major system changes with engineering and product teams.
• Own the secure SDLC program: SAST/DAST, SCA, secrets scanning, and CI/CD security gates.
• Perform deep-dive code reviews and manual penetration testing of high-risk services and APIs.
• Design and build internal security tooling and guardrails for fast but safe engineering.
• Mature vulnerability management including triage, scoring, and remediation with owners.
• Manage relationships with external pentest vendors and bug bounty programs; drive durable fixes.

Skills

Application Security

Threat Modeling

Code Review

SAST/DAST

CI/CD Security

Cloud Security (AWS/GCP/Azure)

Security Leadership

Job description

fomo is hiring a Staff Security Engineer to own and elevate our application security program. This hands-on role acts as the technical authority on secure software, collaborating with engineering to identify and fix vulnerabilities, and to shape security at architecture and code levels.

You will focus on product and application security, embedding with the product teams to secure design, development, and shipping processes while guiding security tooling and incident response activities.