Staff Security Engineer | Application Security

Gympass; United States; Remote; USD 140,000 - 230,000; Full time

Benefits offered by this job

Remote role with Brazil eligibility

Home-office reimbursement

Health, dental, and life insurance

Wellness membership and wellbeing资源

Parental leave and paid time off (incl

Birthday day off

Job summary

Gympass is seeking a senior security leader to own security work across a large multi-service product, focusing on secure software development.

You will blend hands-on technical work with cross-team leadership, connecting testing, incidents, cloud environments, and compliance to reduce risk.

Qualifications

• Deep hands-on security expertise in at least one domain (application security, cloud security, etc).
• Experience coordinating with engineering teams and communicating risks to stakeholders.
• Ability to assess risks across connected systems and guide remediations.

Responsibilities

• Lead architecture reviews and threat modeling for high-risk projects.
• Plan or conduct penetration tests and red-team exercises with engineering teams.
• Coordinate remediation of complex vulnerabilities and incidents across services.

Skills

Security domain expertise

Cross-team communication

Incident response

Threat modeling

Job description

Role overview

Own security work across a large, multi-service product, with a focus on application security and secure software development. The role combines hands-on technical work with cross-team leadership, connecting findings from testing, incidents, cloud environments, and compliance into a coherent approach to reducing risk.

Responsibilities

• Lead architecture reviews and threat modeling for high-risk projects, and establish secure design and coding practices.
• Plan or conduct penetration tests and red-team exercises, then work with engineering teams to resolve root causes.
• Coordinate remediation of complex vulnerabilities and incidents across services; turn post-incident reviews into lasting safeguards.
• Set security measures and targets, such as remediation timelines and response goals, and build monitoring to track progress.
• Guide security architecture, platform changes, and migrations involving areas such as identity, cloud, or key management.
• Deliver larger security initiatives, balancing immediate fixes with durable reductions in security risk.

Requirements

• Deep hands-on expertise in at least one security domain, such as application security, threat intelligence, detection engineering, or cloud security.
• Working familiarity across security disciplines, including incident response and compliance.
• Ability to assess technical risks across connected systems and make sound decisions when ownership or the right path is unclear.
• Experience coordinating engineering teams and communicating risks, decisions, and remediation progress to stakeholders.
• Ability to connect security findings and requirements to practical engineering changes and organization-wide safeguards.

Benefits and work setup

• Remote role open to candidates located in Brazil.
• Home-office reimbursement and flexible scheduling.
• Health, dental, and life insurance, plus a wellness membership and emotional wellbeing resources.
• Paid parental leave and paid time off, including an additional birthday day off.