Staff Application Security Engineer — Lead Security Architecture

fomo Labs; New York (NY); On-site; USD 180,000 - 240,000; Full time

Benefits offered by this job

Competitive cash compensation and.equ

Equity

Comprehensive health insurance

401(k) with match

Group term life insurance

Flexible time off

Annual company offsites

Job summary

fomo is hiring a Staff Security Engineer to own and elevate our application security program. You will be the technical authority on secure software, working with engineering to fix vulnerabilities, build scalable tooling, and shape security at architecture and code level.

This role focuses on product and application security, embedding in how our product is designed, built, and shipped, with leadership in threat modeling and secure coding.

Qualifications

• 7+ years in security engineering with focus on application security.
• Hands-on in code review, threat modeling, and vulnerability classes.
• Proficient in secure coding practices and CI/CD security integration.

Responsibilities

• Lead security architecture reviews and threat modeling for new features.
• Own secure SDLC including SAST/DAST, SCA, secrets scanning, and gates.
• Perform deep-dive code reviews and penetration testing of services and APIs.
• Build internal security tooling and guardrails for fast, safe development.
• Mature vulnerability management with triage and remediation coordination.
• Manage external pentest vendors and bug bounty programs to fixes.
• Set direction on authentication, API security, and data protection patterns.

Skills

Secure code review

Threat modeling

OWASP Top 10

Auth / session security

SSRF / injection analysis

Business logic flaws

CI/CD security integration

SAST / DAST

SCA tooling

Cloud security (AWS/GCP/AZ)

Container security

API security

Mentoring engineers

Security tooling development

Tools

SAST/DAST tooling

CI/CD security tools

Threat modeling tools

Vulnerability management platforms

Job description

fomo is hiring a Staff Security Engineer to own and elevate our application security program. You will be the technical authority on secure software, working with engineering to fix vulnerabilities, build scalable tooling, and shape security at architecture and code level.

This role focuses on product and application security, embedding in how our product is designed, built, and shipped, with leadership in threat modeling and secure coding.