Staff Application Security Engineer

FarCoder; Northern (KY); Hybrid; USD 183,000 - 215,000; Full time

Benefits offered by this job

Equity

Hybrid work model

Competitive compensation

Job summary

Engine is seeking a Staff Application Security Engineer to own security across its applications and software systems in a full-time remote-capable role in the USA. You will drive the vulnerability management pipeline, work with engineering teams, and implement secure coding practices and incident response.

The role requires strong expertise in Node.js, Kubernetes, CI/CD, Python, Ruby, and familiarity with Docker, containers, compliance, and security tooling.

Qualifications

• Experience with SIEM and threat detection.
• Secure coding practices and threat modeling knowledge.
• Experience in vulnerability management and deployment pipelines.

Responsibilities

• Own SIEM configuration, tuning, and alerting for incidents across layers.
• Perform architecture, code, and infrastructure reviews and light pentesting.
• Maintain and optimize a container vulnerability management pipeline.
• Collaborate with development and infra teams to enforce secure coding and remediation.
• Build and maintain security tooling and frameworks for the engineering organization.
• Participate in incident response and forensic investigations.
• Provide security guidance and training to teams to improve security posture.

Skills

Node.js

Kubernetes

CI/CD

Python

Ruby

Java

Tools

Docker

Compliance

Containers

Job description

EEngine# Remote Staff Application Security Engineer Job at EngineUSAFull TimeUSA$25000 - $40000 USDNode.jsKubernetesCI/CDPythonRubyJavaDockerComplianceContainersSecurity\"When applying, mention the word FarCoder to show you've read the job post completely. Employers can look for these words to identify genuine, thoughtful applicants and avoid spam.\"## Job OverviewEngine is hiring a remote candidate for Staff Application Security Engineer. This is a full time position. Work location: USA.The role typically involves technologies such as Node.js, Kubernetes, CI/CD, Python, Ruby, Java.## Key Responsibilities* Threat Detection & SIEM Ownership: Own the configuration, tuning, and management of our SIEM solution. You will diagnose unusual threats through sophisticated analysis and develop the alerts needed to respond to security incidents across multiple layers.* Security Analysis & Reviews: Perform architecture reviews, code reviews, and infrastructure configuration reviews. You will conduct light penetration testing on web and mobile apps, identifying root causes of vulnerabilities and resolving them using creative problem-solving.* Vulnerability Management: Maintain and optimize a vulnerability management CI/CD pipeline within our container/application delivery infrastructure. You will adapt proven methods to align security goals with business objectives, even when guidance is light.* Cross-Functional Collaboration: Partner with development and infrastructure teams to enforce secure coding practices and remediation strategies. You will adapt your messaging across teams to reduce misalignment and move security work forward.* Implementation & Tooling: Build and maintain the frameworks and tooling for enterprise security, ensuring that security guidelines are clear and actionable for the broader engineering organization.* Incident Response: Play a key role in incident response and forensic investigations. You will weigh context and data thoughtfully to make smart decisions during high-pressure situations.* Security Advocacy: Stay current on the latest threats and provide direct, clear guidance to development teams. You will help develop security training to empower your peers and improve the team's overall security posture.## Required Skills### Primary Skills* Node.js* Kubernetes* CI/CD* Python* Ruby### Secondary Skills* Java* Docker* Compliance* Containers* SecuritySkills required for this role include Node.js, Kubernetes, CI/CD, and related tools for day-to-day development.## Job Details* **Employment Type:** Full Time* **Location:** USA* **Salary:** $25000 - $40000 USD## Tech StackNode.js, Kubernetes, CI/CD, Python, Ruby, Java, Docker, Compliance, Containers, Security## Role details### **About Engine**Engine is the AI-native platform for intelligent travel. For a decade, Engine has built the proprietary technology and supply behind modern business travel, serving over 39,000 customers and nearly 2 million travelers, along with leading travel and AI companies that build on Engine's infrastructure. One system powers business travel, group travel, human agents, and AI agents.That work has earned recognition as one of Fast Company's Best Workplaces for Innovators (2025), TravelTech's Reservation Platform of the Year (2026), and one of Built In's Best Places to Work (2020-2026).We're looking for bold, ambitious people to help redefine how businesses manage and experience travel. Working here, you can expect exponential growth, an ambitious pace, full ownership, and high-caliber colleagues who push you to do the best work of your career. Every hire raises the bar.Come outpace the ordinary and build the future of travel with us.Engine is seeking a highly-skilled and motivatedStaff Security Engineer to join our team. In this role, you will be a primary owner of the security and integrity of our company's applications and software systems. You will be responsible for building out a vulnerability management pipeline and executing our application security program. You will collaborate closely with engineering teams to ensure that Engine adheres to best practices in application security, tackling complex security repairs and ensuring our \"engine\" runs fast and securely.### **Your Mission:**As part of the Engine team, you'll play a vital role in an environment where innovation meets collaboration. You will drive work independently, syncing regularly to ensure quality and alignment across the following areas:### **What You'll Bring to Engine:**We're looking for a specialist who is ready to take ownership of team outcomes and deliver high-quality work:* **Technical Proficiency:** Highly skilled in one or more programming languages (e.g., Ruby, Java, Python, C#, Node.js).* **SIEM & Monitoring:** Expertise in managing SIEM solutions with a focus on comprehensive, efficient alerting that reduces \"noise.\"* **Cloud & Containers:** Strong knowledge of Docker and Kubernetes, with hands-on experience in automated container vulnerability management.* **Security Testing:** Mastery of SAST, DAST, and IAST tools, with the ability to perform manual validation testing to confirm findings.* **Security Principles:** Deep knowledge of the OWASP Top 10, Mitre Top 25, and secure coding practices.* **Analytical Problem Solving:** Ability to assess complex, ambiguous situations to identify root causes and provide thoughtful input on difficult security topics.* **Communication:** A track record of earning credibility with peers through clear, direct communication and a passion for mentoring others.* **Compliance & Frameworks:** Experience working with cloud security concepts and compliance frameworks such as SOC 2 and PCI.*Applications for this role will be accepted through November 20th, 2026 until the role is filled. We encourage you to apply early, as we may begin reviewing applications before the deadline.***Compensation**Our compensation packages are based on several factors, including your experience, expertise, and location. In addition to a competitive base salary, all roles receive equity. Depending on the role, total compensation may also include an annual bonus. Your recruiter will share your complete compensation package as you move through the process.Base Pay Range$182,800 - $215,000 USD**The Engine Edge: Perks & Compensation**We believe in rewarding great work with great benefits:* **Compensation:** Competitive base pay tied to role and experience, with equity for all employees. Some roles are also eligible for bonuses or commissions.* **Benefits:** Check out our full list at* **Environments for Success:** Different roles have different needs in terms of the environments that drive success which is why we have a hybrid-hub model. Whether you are in one of our amazing offices or fully remote, we'll make sure you have what you need to succeed.*Perks and benefits may vary based on employment type, location, and more*## Apply for this Job## Explore More Jobs