Senior Remote AppSec Engineer: Secure SDLC & API

Miteksystems 2; United States; On-site; USD 120,000 - 150,000; Full time

Benefits offered by this job

Home office setup allowance

Stock plan participation

Paid time off

Job summary

Mitek is seeking an AppSec Engineer to own remediation of findings and advance the secure development lifecycle across product teams. You will drive vulnerability remediation, threat modeling, and secure design reviews in a fast-paced environment focused on financial technology security.

Responsibilities include leading penetration testing cycles, embedding security into architecture decisions, and building the Security Champions program to raise developer awareness of OWASP Top 10 and secure

Qualifications

• 5-8 years in application security or security-focused software engineering.
• Experience with application penetration testing including API testing.
• Hands-on SAST, DAST, and SCA tuning and operation.
• Secure code review across multiple web languages.
• Threat modeling using STRIDE or PASTA.
• Knowledge of OWASP Top 10 and API security risks; ability to influence development teams.
• Experience in financial services, fintech, or SaaS for regulated industries is a plus.
• Cloud-native application security including container security.

Responsibilities

• Own remediation of validated findings with prioritized SLAs and drive root-cause fixes.
• Define and own the Secure Development Lifecycle security gates and review checkpoints.
• Ensure SAST, DAST, and SCA tooling is configured, tuned, and producing actionable output.
• Embed security requirements into product planning and architecture decisions.
• Threat-model new features and architectural changes before code is written; review designs for authentication, authorization, data-flow, and cryptographic risk.
• Lead API security standards—OAuth 2.0, mTLS, rate limiting—and oversee secure code review and pen-testing cycles.
• Build and run a Security Champions program across development squads and deliver developer security training.
• Collaborate with VP IT/Security and Engineering leadership; ensure proactive security investments.

Skills

Application security

Penetration testing

Threat modeling

OWASP Top 10

Secure SDLC

API security

Security champions

Education

OSCP

GWEB

CSSLP

Tools

SAST tooling

DAST tooling

SCA tooling

Job description

Mitek is seeking an AppSec Engineer to own remediation of findings and advance the secure development lifecycle across product teams. You will drive vulnerability remediation, threat modeling, and secure design reviews in a fast-paced environment focused on financial technology security.

Responsibilities include leading penetration testing cycles, embedding security into architecture decisions, and building the Security Champions program to raise developer awareness of OWASP Top 10 and secure