Senior AppSec Engineer — Hybrid (Los Angeles)

Altruist; Los Angeles (CA); Hybrid; USD 170,000 - 225,000; Full time

Benefits offered by this job

Stunning offices

401k with 4% match

Health insurance

Paid parental leave

L&D budget

Work from anywhere policy

Job summary

Altruist is seeking a Senior Application Security Engineer to join our growing Security team in Los Angeles. You will secure our Java/Spring services from design through the CI/CD pipeline, educate development teams on secure coding practices, perform technical security assessments, and drive threat modeling to anticipate threats and mitigate risks.

This hybrid role requires three days onsite weekly at our San Francisco FiDi or Culver City offices, with emphasis on hands-on assessments, tooling,

Qualifications

• 4+ years of experience as an Application/Security Engineer
• Experience with security assessments, design reviews or threat modeling
• Hands-on secure code review (Java, Spring or similar)
• Experience operating SAST/DAST/SCA and secrets-scanning tooling in a CI/CD pipeline
• Strong ability to work independently

Responsibilities

• Educate and train development teams on secure coding practices and emerging threats
• Perform technical security assessments and code reviews across Java/Spring services
• Engage in threat modeling to anticipate potential threats and mitigation strategies
• Own and tune SAST, DAST, SCA tooling in CI/CD pipelines and drive remediation
• Partner with engineering to address auth gaps and systemic security issues
• Collaborate with Detection & Response and offensive security to turn findings into detections and prevention
• Contribute to secure SDLC standards and developer security guardrails

Skills

Security assessments

Threat modeling

Secure code review

CI/CD tooling

SAST/DAST/SCA

Education

Bachelor's degree in CS/CE/Info Security

Tools

SAST

DAST

SCA

Secrets scanning

Job description

Altruist is seeking a Senior Application Security Engineer to join our growing Security team in Los Angeles. You will secure our Java/Spring services from design through the CI/CD pipeline, educate development teams on secure coding practices, perform technical security assessments, and drive threat modeling to anticipate threats and mitigate risks.

This hybrid role requires three days onsite weekly at our San Francisco FiDi or Culver City offices, with emphasis on hands-on assessments, tooling,