Staff AppSec Engineer: Architect Secure, Scalable APIs

Fomo; New York (NY); On-site; USD 180,000 - 240,000; Full time

Benefits offered by this job

Equity

Health insurance

401(k) with match

Group term life insurance

Flexible time off

Annual offsites

Job summary

fomo is seeking a Staff Security Engineer to own and elevate our application security program. This hands-on role acts as the technical authority on secure software, partnering with engineering to fix vulnerabilities, build scalable security tooling, and shape security at architecture and code level.

You'll focus on product/app security rather than IT, embedding with product teams to secure how features are designed, built, and shipped across the org.

Qualifications

• 7+ years in security engineering with focus on application security
• Experience with secure code review and threat modeling
• Strong software engineering background that includes production code
• Experience building and scaling AppSec tooling and processes (SAST/DAST, SCA, CI/CD)
• Ability to influence engineering culture and set security standards
• Familiarity with cloud-native environments (AWS/GCP/Azure) and API security

Responsibilities

• Lead security architecture reviews and threat modeling for new features
• Own secure SDLC program including SAST/DAST, SCA and CI/CD gates
• Perform deep code reviews and pen-testing of high-risk services and APIs
• Design internal security tooling and guardrails for speed with safety
• Manage vulnerability triage and remediation with engineering owners
• Oversee external pentest vendors and bug bounty processes
• Set direction on authentication, authorization, API security and data protection
• Mentor engineers on secure coding practices
• Contribute to incident response for app-layer issues
• Help evolve fomo's AppSec roadmap and metrics

Skills

Application security

Threat modeling

Code review

SAST/DAST

CI/CD security

Penetration testing

API security

Communications

Technical leadership

Tools

SAST

DAST

CI/CD tooling

Job description

fomo is seeking a Staff Security Engineer to own and elevate our application security program. This hands-on role acts as the technical authority on secure software, partnering with engineering to fix vulnerabilities, build scalable security tooling, and shape security at architecture and code level.

You'll focus on product/app security rather than IT, embedding with product teams to secure how features are designed, built, and shipped across the org.