Senior AppSec Engineer — Remote, Impactful SDLC

Vannevar; United States; On-site; USD 160,000 - 210,000; Full time

Benefits offered by this job

Health, dental, and vision insurance

100% remote - work from anywhere in th

401k matching

Mental benefits

Flexible work environment - you manage

Pet and child care reimbursement

Unlimited PTO

Job summary

Vannevar is seeking an Application Security Engineer to embed security across our SaaS platform. You will partner with software, DevOps, and platform teams to ship secure features, protect customer data, and support compliance milestones as the company scales.

You will drive threat modeling, implement SAST/SCA/DAST and container/IaC checks in CI/CD, coach secure-by-default practices, and coordinate with audit partners to strengthen our security posture across the SDLC.

Qualifications

• 5+ years in Application / Product Security.
• Hands-on experience securing web applications and automating AppSec workflows.
• Familiarity with DevSecOps practices and container security & patching.
• Experience with GitHub Actions, Python, TypeScript/JavaScript.
• Clear, concise communicator who can translate risk for engineers.

Responsibilities

• Implement and deploy enterprise standard SAST, SCA, secrets-scan, DAST, and container/IaC checks in CI/CD.
• Embed with development teams to run threat models, review critical PRs, and coach secure‑by‑default habits.
• Drive a shift‑left vulnerability detection program to identify and remediate vulnerabilities earlier in the software development lifecycle (SDLC).
• Coordinate with DevOps for application security issues that cross between application and infrastructure layers
• Support incident‑response for product issues and feed lessons back into code, docs, and process.

Skills

AppSec experience

Web application security

DevSecOps

GitHub Actions

Python

TypeScript/JavaScript

Communication

Tools

GitHub Actions

Python

TypeScript/JavaScript

Job description

Vannevar is seeking an Application Security Engineer to embed security across our SaaS platform. You will partner with software, DevOps, and platform teams to ship secure features, protect customer data, and support compliance milestones as the company scales.

You will drive threat modeling, implement SAST/SCA/DAST and container/IaC checks in CI/CD, coach secure-by-default practices, and coordinate with audit partners to strengthen our security posture across the SDLC.