Staff Application Security Engineer: Secure AI & Cloud Apps

Neura Market; Northern (KY); Hybrid; USD 140,000 - 180,000; Full time

Benefits offered by this job

Medical, dental, vision coverage

Equity (ISOs)

401(k) program

Flexible work environment

Learning and development stipend

Job summary

Upside is transforming how brick-and-mortar commerce is secured and scaled. We are seeking a senior security engineer to own the application security program across mobile, web, and backend systems, partnering with Cloud Security and Engineering to reduce real risk and improve secure software delivery.

You will lead vulnerability management, threat modeling, and security reviews, and help build guardrails, automation, and security guidance that engineers actually use.

Qualifications

• 6+ years in application or product security or equivalent depth in secure software engineering with ownership.
• Strong Python code review skills and ability to explain issues to engineers.
• Track record of shipping security improvements with measurable risk reduction.
• Experience with threat modeling and secure design reviews before shipment.
• Practical use of AI in security work.
• Working knowledge of AWS security and CI/CD security in GitHub Actions.

Responsibilities

• Own Upside's application security program, standards, vulnerability management, and guardrails.
• Triage findings from scanning, code review, and tests; work with engineers to ship fixes.
• Lead security reviews and threat models for high-impact work across mobile, web, and backend systems; document mitigation plans.
• Review and threat model AI workflows; define security controls for tool use, data access, and action execution.
• Build automation to triage findings, prioritize with context, and produce remediation guidance for engineers.
• Create guardrails: repository baselines, GitHub checks, secure-by-default patterns for AWS, templates, and security champions program.

Skills

Application security

Python

Threat modeling

Security design reviews

AI security

AWS security fundamentals

Tools

GitHub Actions

Python

Terraform

AWS

Snowflake

dbt

Job description

Upside is transforming how brick-and-mortar commerce is secured and scaled. We are seeking a senior security engineer to own the application security program across mobile, web, and backend systems, partnering with Cloud Security and Engineering to reduce real risk and improve secure software delivery.

You will lead vulnerability management, threat modeling, and security reviews, and help build guardrails, automation, and security guidance that engineers actually use.