Application Security Engineer

📋 Description Automate security controls by integrating security testing tools, including SAST, DAST, and SCA Develop secure SDLC practices by designing, maintaining, and communicating developer-friendly Manage the bug bounty program by coordinating private bug bounty activities, monitoring program Strengthen engineering capabilities by delivering secure coding training, sharing application Conduct application security reviews by performing threat modeling and secure code reviews for Java Promote security awareness by collaborating with communications teams to develop technical content 🎯 Requirements 3–5+ years of dedicated experience in Application Security and/or full-stack development. Practical experience reviewing Java and Python applications for security vulnerabilities. Strong familiarity with integrating SAST and DAST tools into modern CI/CD workflows, including Hands-on experience operating bug bounty programs, triaging findings, and defining program metrics Practical experience applying methodologies such as STRIDE to assess application and system risks. Strong communication skills and the ability to build trust and collaborate effectively with 🎁 Benefits Salary: The advertised annual salary range is $175,000–$230,000. The original posting does not Equity: Early equity opportunities. Retirement savings: 401(k) plan with a 4% employer match and immediate vesting, applicable to US Health and wellness: Medical, dental, and vision insurance; HSA/FSA options; life and disability Time off: Flexible paid time off, paid national holidays, and a global parental leave program. Professional development: Learning stipend, internal promotion opportunities, lunch-and-learn