Senior AppSec Engineer – Fintech, AI-Sec Focus

Kikoff; San Francisco (CA); Presencial; USD 268.000 - 321.000; Jornada completa

Descripción de la vacante

Kikoff is seeking a Senior Application Security Engineer to shape the security roadmap for web, mobile, and API surfaces. You will drive secure coding practices, threat modeling, and vulnerability remediation at scale in a fintech environment.

You will own authentication and session security, review AI-assisted code, and guide the security champions program while collaborating with product and engineering teams. Strong fintech compliance experience is valued.

Formación

• 6+ years in security engineering with hands-on AppSec experience.
• Experience securing REST/GraphQL APIs and native mobile apps.
• Proven ability to design/authenticate systems (OAuth/OIDC, MFA, account recovery).

Responsabilidades

• Drive and shape the AppSec roadmap including secure SDLC, code review, threat modeling, vulnerability triage, and bug bounty programs.
• Define security standards and build tooling for secure code (SAST, SCA, secrets scanning) integrated into CI.
• Determine how AI-generated code is reviewed and gated; design controls for AI-assisted contributions.

Conocimientos

Security engineering

OAuth/OIDC/MFA

AppSec tooling

REST/GraphQL security

Bug bounty/PenTest

Fintech compliance (PCI-DSS/SOC 2)

Herramientas

SAST

SCA

DAST

Secrets scanning

CI/CD integration

Descripción del empleo

Kikoff is seeking a Senior Application Security Engineer to shape the security roadmap for web, mobile, and API surfaces. You will drive secure coding practices, threat modeling, and vulnerability remediation at scale in a fintech environment.

You will own authentication and session security, review AI-assisted code, and guide the security champions program while collaborating with product and engineering teams. Strong fintech compliance experience is valued.