About The Company At Quartermaster AI, we believe the ocean should be a safe and sustainably managed resource for all. By leveraging cutting-edge AI and robotics, we unlock capabilities that were only recently impossible.
Our distributed open-ocean systems enable every vessel to sense, compute, and communicate, enhancing maritime domain awareness for those who need it most. We are committed to developing innovative solutions that support maritime safety, security, and environmental sustainability through advanced technology.
About The Role
As our Security Engineer, Application Security, you will be responsible for ensuring the security of the software we develop across various platforms including cloud services, APIs, data pipelines, and distributed edge systems. You will serve as the security partner to engineering teams, leading threat modeling, security reviews, and vulnerability assessments.
Your role involves integrating security into the development lifecycle, building automation tools, and fostering a security-aware culture within the organization. This is a senior, hands-on position with broad autonomy, requiring deep technical expertise and strategic thinking to help shape our secure software development practices as the company scales.
Qualifications
5–8 years of experience in application security, product security, or software engineering with a focus on security.
Proficiency in modern programming languages such as Python, Go, Java, JavaScript/TypeScript, Rust, or C/C++ with the ability to read and analyze production code.
Experience evaluating code for vulnerabilities and leading threat modeling and security design reviews.
Hands-on experience with application security tools including SAST, DAST, SCA, static analysis platforms like CodeQL, and integrating them into CI/CD pipelines.
Strong understanding of OWASP Top 10, CWE, common vulnerability classes, and secure coding practices.
Experience securing modern architectures such as microservices, REST/gRPC APIs, containers, and cloud environments (AWS, Azure, GCP).
Experience performing black-box and grey-box testing of web applications and APIs.
Proven ability to collaborate with engineering teams to drive vulnerability remediation.
Excellent written and verbal communication skills, capable of influencing technical and non-technical audiences.
Must be a U.S. citizen.
Bachelor’s degree in Computer Science, Cybersecurity, or equivalent hands-on experience.
Responsibilities
Lead threat modeling and secure design reviews for new and existing services to identify and mitigate risks early in development.
Conduct in-depth secure code reviews and comprehensive security assessments across web, API, cloud, and backend services.
Build, integrate, and optimize application security tooling within CI/CD pipelines, including SAST, DAST, SCA, secret scanning, and static analysis platforms.
Prioritize and coordinate the remediation of application vulnerabilities with engineering teams, assessing risk and business impact.
Develop automation and developer-friendly tooling that eliminate classes of weaknesses, making secure development the default.
Serve as the subject matter expert on application security, guiding product design toward secure-by-default patterns.
Define and mature the secure software development lifecycle (SDLC), including secure coding standards and security requirements.
Manage vulnerability disclosure processes, including bug bounty coordination, root-cause analysis, and fixing security issues.
Enhance software supply chain security through dependency management, artifact signing, and build pipeline integrity.
Collaborate with security operations on application-layer incidents, providing expert guidance during investigations and remediation efforts.
Deliver security training to developers and promote a security-conscious engineering culture through enablement initiatives.
Benefits
Competitive salary package commensurate with experience.
Comprehensive medical, dental, and vision insurance plans.
Flexible remote work arrangements to support work-life balance.
Opportunity to work on cutting-edge AI and robotics systems in high-stakes environments.
Autonomy to influence security practices, tooling, and standards across the organization.
Career growth opportunities within a rapidly expanding defense-tech company.
Participation in innovative projects that contribute to maritime safety and national security.
Equal Opportunity
Quartermaster AI is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, age, disability, or any other protected status in accordance with applicable laws.