Senior AppSec Engineer – Web Platform & Payments (Remote)

aicente; United States; On-site; USD 110,000 - 170,000; Full time

Job summary

aicente is seeking a security engineer to own security across a Next.js platform with 426 API routes that handles payments, Firebase auth, and sensitive data.

You will threat-model new features, run appsec reviews, lock down auth and secrets, monitor for abuse, and lead incident response.

This remote-friendly role emphasizes a do-not-regress mindset and high-leverage work across payments, email, and identity.

Qualifications

• 4+ years in application/product security or security engineering.
• Deep on web appsec (OWASP), auth, and cloud (GCP/AWS) security.
• Read and write code — TypeScript/Node a big plus.
• Calm, methodical incident handler with clear writing.

Responsibilities

• Threat-model features and run application security reviews (authz, injection, SSRF, secrets)
• Own cloud + platform security: least privilege, secrets, dependency and container scanning
• Build monitoring/alerting for abuse and lead incident response
• Own the security review process — protect the payment + email send paths

Skills

Application security

Security engineering

OWASP

Cloud security

TypeScript/Node

Job description

aicente is seeking a security engineer to own security across a Next.js platform with 426 API routes that handles payments, Firebase auth, and sensitive data.

You will threat-model new features, run appsec reviews, lock down auth and secrets, monitor for abuse, and lead incident response.

This remote-friendly role emphasizes a do-not-regress mindset and high-leverage work across payments, email, and identity.