Staff AppSec Engineer - Build Security at Scale

FOMO Labs Inc.; New York (NY); Ibrido; USD 180.000 - 230.000; Tempo pieno

Vantaggi offerti da questo lavoro

Health insurance

401(k) with match

Group term life insurance

Flexible time off

Annual company offsites

Descrizione del lavoro

fomo is seeking a Staff Security Engineer to own and elevate our application security program. You will be the technical authority, guiding secure design, architecture, and coding across the product.

You’ll work with engineering to fix vulnerabilities, build scalable tooling, and shape security at the code level. You will drive threat modeling, secure SDLC, and vulnerability management while embedding security into engineering culture and practices.

Competenze

• 7+ years in security engineering with a focus on application security.
• Hands-on experience with secure code review and threat modeling.
• Experience with common vulnerability classes (OWASP Top 10, auth/session flaws, SSRF, injection, business logic flaws).
• Strong software engineering background; able to read and write production code.
• Experience building and scaling AppSec tooling and processes (SAST/DAST, SCA, CI/CD security).
• Proven ability to drive security into engineering culture through influence.
• Familiarity with cloud-native environments (AWS/GCP/Azure), container security, and modern APIs.
• Excellent communication; can explain risk to engineers and non-technical stakeholders.
• Prior experience as a technical lead or staff-level IC.

Mansioni

• Lead security architecture reviews and threat modeling for new features and major system changes with engineering and product teams.
• Own our secure SDLC program: SAST/DAST, dependency checks, secrets scanning, and CI/CD gates.
• Perform deep-dive code reviews and manual penetration testing of high-risk services and APIs.
• Design and build internal security tooling and guardrails enabling fast engineering with low risk.
• Run and mature vulnerability management: triage, scoring, remediation with owners.
• Manage relationships with external pentest vendors and bug bounty programs.
• Set direction on authentication, authorization, API security, and data protection patterns.
• Mentor engineers on secure coding and be a go-to security resource.
• Contribute to incident response when application-layer issues arise.
• Help define and evolve AppSec roadmap and metrics.

Conoscenze

Application security

Threat modeling

Secure code review

SAST/DAST

CI/CD security

Cloud security

Penetration testing

Communication skills

Mentoring

Technical leadership

Descrizione del lavoro

fomo is seeking a Staff Security Engineer to own and elevate our application security program. You will be the technical authority, guiding secure design, architecture, and coding across the product.

You’ll work with engineering to fix vulnerabilities, build scalable tooling, and shape security at the code level. You will drive threat modeling, secure SDLC, and vulnerability management while embedding security into engineering culture and practices.