Senior AppSec Engineer - Remote, Drive Secure SDLC

Mitek Systems; United States; On-site; USD 130,000 - 190,000; Full time

Benefits offered by this job

Wellness benefits

Stock options

Home office setup allowance

Paid time off & holidays

Job summary

Mitek Systems is seeking to hire an AppSec Engineer to serve as the security authority for our software products. This role bridges the security and engineering teams, embedding security into the SDLC for a ~50-person development group building internet-hosted banking and financial software.

You will own remediation, drive secure development practices, and contribute to regulatory engagements. Key responsibilities include managing the remediation program, defining SDLC security gates, and

Qualifications

• Knowledge,skills and abilities typically gained through 5–8 years in application/security or security-focused software engineering.
• Application penetration testing including business-logic and API testing.
• Hands-on SAST, DAST, and SCA tuning and operationalization.
• Secure code review across at least two web-application languages.
• Threat modeling using STRIDE, PASTA, or equivalent.
• Depth in OWASP Top 10 and API security risks; ability to influence development teams.

Responsibilities

• Own the application vulnerability remediation program with prioritized developer guidance and clear SLAs.
• Work with development squads to explain findings, validate fixes, and confirm remediation.
• Drive systemic root-cause fixes rather than one-by-one patching; escalate…
• Define and own the SDLC — security gates and review checkpoints in sprint and release processes.
• Ensure SAST, DAST, and SCA tooling is configured, tuned, and producing actionable developer output.
• Embed security requirements into product planning and architecture decisions.
• Threat-model new features and architectural changes before code is written.
• Review designs for authentication, authorization,data-flow, and cryptographic risk.
• Produce written threat models that serve as developer guidance and audit evidence.
• Own API security standards — OAuth 2.0,mTLS, rate limiting, and abuse prevention.
• Conduct or coordinate manual secure code review of security-sensitive components.
• Lead application penetration-testing cycles — scoping, managing testers,validatingfindings.
• Build and run a Security Champions program across development squads.
• Deliver developer security training on OWASP Top 10 and secure-coding patterns.
• Create runbooks, coding standards, and pattern libraries developers can applyindependently

Skills

5–8 yrs exp in AppSec

Penetration testing

SAST/DAST/SCA tuning

Threat modeling (STRIDE/PASTA)

Secure code review

OWASP Top 10

Education

BS in CS or related field

Tools

SAST tools

DAST tools

SCA tooling

Job description

Mitek Systems is seeking to hire an AppSec Engineer to serve as the security authority for our software products. This role bridges the security and engineering teams, embedding security into the SDLC for a ~50-person development group building internet-hosted banking and financial software.

You will own remediation, drive secure development practices, and contribute to regulatory engagements. Key responsibilities include managing the remediation program, defining SDLC security gates, and