Senior AppSec Engineer — Remote, AI Security for Fintech

monarchmoney; United States; Remote; USD 150,000 - 190,000; Full time

Benefits offered by this job

Fully remote

Equity

Home office stipend

Medical benefits

Unlimited PTO

3-day weekends

Job summary

Monarch is seeking a Senior Application Security Engineer to join our Security Engineering team. You will be a hands-on practitioner embedded with product and engineering to conduct application security reviews, manage vulnerability processes, and improve AI security practices as Monarch scales.

You’ll collaborate with engineers on threat modeling, SAST/DAST, and AI security for a secure Django/Python stack and web/API surfaces.

Qualifications

• 5+ years in security engineering with demonstrated depth in Application and AI security—threat modeling, SAST/DAST, secure code review, and vulnerability management

Responsibilities

• Conduct application security reviews — threat modeling, code review, and risk assessment — for new features and major product changes across Monarch's Django/Python stack
• Perform and improve SAST/DAST operations including triage, validation, and remediation tracking of findings in CI/CD pipelines
• Work through the vulnerability backlog with urgency — maintaining triage criteria, remediation tracking, and escalation paths in partnership with engineering squads
• Perform and coordinate penetration testing and security assessments against Monarch's web and API surfaces
• Apply and improve AI security review processes for LLM-integrated features and agentic attack surfaces — covering prompt injection, data leakage, model abuse, and supply chain risk
• Build and maintain security automations and AI-powered tooling, and define and assess security requirements for AI workflows and agentic systems.
• Participate in the weekly security on-call rotation

Skills

Security engineering

Application security

AI security

Python

Threat modeling

Tools

Semgrep

Burp Suite

Nuclei

Job description

Monarch is seeking a Senior Application Security Engineer to join our Security Engineering team. You will be a hands-on practitioner embedded with product and engineering to conduct application security reviews, manage vulnerability processes, and improve AI security practices as Monarch scales.

You’ll collaborate with engineers on threat modeling, SAST/DAST, and AI security for a secure Django/Python stack and web/API surfaces.