Senior AppSec Engineer: First Dedicated Security Hire in NYC

vibehackers; New York (NY); On-site; USD 220,000 - 235,000; Full time

Benefits offered by this job

Paid holidays

Medical insurance

Dental insurance

Company 401(k)

NYC office in Manhattan

Lunch and snacks provided

Health concierge

Employee Assistance Program

Job summary

Savvy Wealth, based in NYC, is seeking a Senior Application Security Engineer to lead hands-on AppSec across product and SaaS tooling. You will own vulnerability management, CI/CD security tooling, and cloud hardening while building guardrails for AI-assisted development and non-technical workflows.

The role requires 5+ years in security engineering, strong code literacy, and the ability to influence both technical and non-technical teams in a fast-paced startup environment.

Qualifications

• 5+ years in hands-on application security, preferably in a product or small security team.
• Experience embedding security into CI/CD workflows and development lifecycle.
• Ability to read, write, and remediate code, not just surface findings.
• Strong cross-functional communication with technical and non-technical stakeholders.
• Practical SaaS security experience including OAuth reviews and configuration hardening.

Responsibilities

• Own vulnerability management end-to-end across product, codebases, and cloud infrastructure.
• Build and operate the AppSec tooling pipeline with CI secrets scanning, SCA, and SAST rollout.
• Set security hygiene standards and enforce human review on AI-generated code paths.
• Partner with AI teams to design guardrails for AI-assisted development and vibe coding.
• Secure SaaS configurations and third-party integrations across platforms (Google Workspace, GitHub, Slack).
• Help establish conditional access and identity controls (SSO, MFA, device posture).
• Define cloud/SaaS baselines and contribute to detection, response, and IR readiness.
• Communicate risk and remediation tradeoffs clearly to stakeholders.

Skills

AppSec engineering

Vulnerability management

CI/CD security

SAST / SCA / Secrets scanning

Cloud security (AWS/GCP)

Threat modeling

Security tooling

Tools

GitHub

SAST tooling

SCA tooling

Secrets scanning

OAuth reviews

Cloudflare

Job description

Savvy Wealth, based in NYC, is seeking a Senior Application Security Engineer to lead hands-on AppSec across product and SaaS tooling. You will own vulnerability management, CI/CD security tooling, and cloud hardening while building guardrails for AI-assisted development and non-technical workflows.

The role requires 5+ years in security engineering, strong code literacy, and the ability to influence both technical and non-technical teams in a fast-paced startup environment.