Staff AppSec Engineer: Shape Secure Software at Scale

Socket.dev; New York (NY); On-site; USD 150,000 - 210,000; Full time

Job summary

fomo is seeking a Staff Security Engineer to own and elevate the application security program. You will be the technical authority on secure software, partnering with engineering to find and fix vulnerabilities, and build scalable tooling across the org.

This role focuses on product and application security, embedded in how our product is designed, built, and shipped. You will influence security direction, drive best practices, and mentor engineers with autonomy.

Qualifications

• 7+ years in security engineering with a strong focus on application security.
• Deep hands-on experience with secure code review and threat modeling.
• Strong software engineering background with ability to read/write production code.
• Experience building and scaling AppSec tooling (SAST/DAST, SCA, CI/CD security integration).
• Track record of influencing engineering culture toward security.
• Familiarity with cloud-native environments (AWS/GCP/Azure), container security, and modern API architectures.
• Excellent communication skills for both engineers and non-technical stakeholders.
• Prior experience as a technical lead or staff-level IC with high autonomy.

Responsibilities

• Lead security architecture reviews and threat modeling for new features and major system changes.
• Own the secure SDLC program including static/dynamic analysis, dependencies, secrets scanning, and CI/CD gates.
• Perform deep-dive code reviews and manual penetration testing of high-risk services and web apps.
• Design and build internal security tooling and guardrails for fast yet safe engineering.
• Run and mature vulnerability management with triage, severity scoring, and remediation coordination.
• Manage relationships with external pentest vendors and bug bounty programs.
• Set technical direction on authentication, authorization, API security, and data protection patterns.
• Mentor engineers on secure coding practices across the org.
• Contribute to incident response for application-layer issues.
• Help define and evolve AppSec roadmap and metrics.

Skills

AppSec

Threat modeling

Code review

SAST/DAST

CI/CD security

Cloud security

Security tooling

Mentoring

Tools

SAST

DAST

SCA

CI/CD tooling

Job description

fomo is seeking a Staff Security Engineer to own and elevate the application security program. You will be the technical authority on secure software, partnering with engineering to find and fix vulnerabilities, and build scalable tooling across the org.

This role focuses on product and application security, embedded in how our product is designed, built, and shipped. You will influence security direction, drive best practices, and mentor engineers with autonomy.