This is a Fully Remote Job
About Our Client:
The organization operates in the SaaS industry, providing a go-to-market solution for revenue teams. It addresses the challenge of accessing accurate and comprehensive B2B contact data by offering a unified platform with verified contact information and engagement tools. The organization supports over 500,000 companies globally, from startups to large enterprises, and has raised significant funding to fuel its growth.
About the Opportunity:
The STAFF APPLICATION SECURITY ENGINEER leads the application security strategy within the security department, tackling complex security challenges across product, platform, and AI-driven features. This role influences engineering and product roadmaps to embed secure practices as defaults, establishing standards that enable multiple teams to build securely without dependence on individual expertise.
Responsibilities:
Lead and execute a multi-year application security strategy aligned with security department objectives.
Integrate security considerations early into engineering, product, platform, and data roadmaps.
Establish secure design, code review, and risk model standards, including guidelines for AI and agent-generated code.
Mentor senior engineers and security champions, expanding the security culture and talent base.
Conduct security architecture reviews and threat modeling for complex, large-scale systems, including AI features.
Develop and promote secure-by-default components to prevent common vulnerabilities.
Manage vulnerability processes across reviews, bug bounty, penetration tests, and automated findings.
Maintain hands-on involvement in identifying and resolving the most challenging security issues.
Define and implement AI-augmented application security practices and secure AI system features.
Requirements:
Over 10 years of experience in software engineering or application security with demonstrated leadership in application security strategy.
Expertise in code review, penetration testing, exploit development, and resolving design flaws.
Proficiency in software development, with experience in Ruby, Ruby on Rails, Python, Linux, cloud platforms (preferably GCP), and Kubernetes.
Deep knowledge of secure architecture, authentication, and authorization patterns.
Practical experience securing AI-powered systems and understanding AI's impact on application security.
Strong judgment and influence to make risk decisions and align stakeholders without formal authority.
Pay Range and Compensation Package:
The pay range and compensation package for this role will be determined based on the candidate's experience, skills, and other relevant factors.
Equal Opportunity Statement:
Our client is an equal opportunity employer. They celebrate diversity and are committed to creating an inclusive environment for all employees. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, or national origin.
Note:
TalentHop is a recruitment partner of this role. Please note that all employment decisions, including candidate assessment, interviews, hiring, compensation, and employment terms, are made exclusively by the hiring employer.