Staff Security Engineer: SDLC & Code Reviews

SpinQuest; United States; Remote; USD 150,000 - 190,000; Full time

Benefits offered by this job

Comprehensive health coverage (Medical

Dental coverage

Vision coverage

100% health insurance premiums paid

4% 401(k) match

Job summary

SpinQuest is seeking an experienced Application Security Engineer to embed security into the SDLC. You will lead secure code reviews for TypeScript/Node.js services and drive threat modeling and vulnerability management across the stack.

The ideal candidate has 8+ years in application security, hands-on secure coding expertise, and experience integrating SAST, DAST, and SCA into CI/CD pipelines. You will partner with engineering and product teams to ship secure software for a fast-growing social

Qualifications

• 8+ years experience in Application Security or related field.
• Strong hands-on secure coding and code review skills.
• Experience with SAST, DAST, SCA integration into CI/CD.

Responsibilities

• Embed security into every stage of the SDLC.
• Lead secure code reviews across TypeScript/Node.js services.
• Drive threat modeling and vulnerability management.

Skills

Secure coding

Code review

Threat modeling

Vulnerability management

SAST

DAST

SCA

CI/CD integration

Tools

TypeScript

Node.js

CI/CD tooling

Job description

SpinQuest is seeking an experienced Application Security Engineer to embed security into the SDLC. You will lead secure code reviews for TypeScript/Node.js services and drive threat modeling and vulnerability management across the stack.

The ideal candidate has 8+ years in application security, hands-on secure coding expertise, and experience integrating SAST, DAST, and SCA into CI/CD pipelines. You will partner with engineering and product teams to ship secure software for a fast-growing social