Senior AppSec Engineer - Remote-First

Syncro; United States; On-site; USD 140,000 - 180,000; Full time

Benefits offered by this job

Pay range

Remote first

Equity program

Unlimited PTO

401k plan

Health insurance

Parental leave

Other benefits

Job summary

Syncro is seeking a Sr. Application Security Engineer to own the security posture across the organization, partnering with engineering and IT to improve the platform's security. This 100% remote role reports to the CTO and involves compliance activities and security architecture guidance.

You will work with senior engineers to reduce vulnerabilities, participate in audits, and help train teams on security best practices. The position offers a strong benefits package and a remote-first culture.

Qualifications

• Strong OO design using languages like C#, Java, Golang.
• Experience with version control systems (Git).
• Experience with relational DBs (PostgreSQL, MySQL, SQL Server) and NoSQL (DynamoDB, MongoDB).
• Solid understanding of information security principles and practices.
• Hands-on experience managing application security across multiple teams.

Responsibilities

• Manage application security, including secure coding practices, vulnerability management, and penetration testing.
• Contribute fixes to vulnerabilities in code and infrastructure.
• Assist teams on security architecture decisions and testing.
• Participate in security audits and risk assessments.
• Engage in compliance activities such as SOC 2 audits.
• Investigate security incidents and breaches.
• Help train employees on information security best practices.

Skills

C#

Java

Golang

Git

PostgreSQL

MySQL

SQL Server

DynamoDB

MongoDB

Security fundamentals

Vulnerability management

Incident investigation

Bug bounty programs

Security audits

Tools

Bug bounty programs

Job description

Syncro is seeking a Sr. Application Security Engineer to own the security posture across the organization, partnering with engineering and IT to improve the platform's security. This 100% remote role reports to the CTO and involves compliance activities and security architecture guidance.

You will work with senior engineers to reduce vulnerabilities, participate in audits, and help train teams on security best practices. The position offers a strong benefits package and a remote-first culture.