Application Security Engineer

Home > Javascript/Typescript programming jobs

Application Security Engineer in USA

SmartRent
Full time
Email

USA
08/24/2026
Report

Phoenix, AZ

Responsibilities

Develop and execute an application security strategy aligned with business objectives and industry standards.
Maintain secure coding standards, security documentation, and application security processes.
Deliver application security and privacy training to development teams.
Review source code for vulnerabilities, insecure patterns, exposed secrets, and risks from AI-generated code.
Triage, reproduce, and support remediation of vulnerabilities identified through automated tools and manual analysis.
Manage application security workflows, including prioritization, ticket tracking, and coordination with development and DevOps teams.
Maintain and improve the responsible disclosure and vulnerability reporting program.
Partner with developers on encryption, hashing, and secure key management practices.
Perform threat modeling, attack-path analysis, application risk assessments, and security validation.
Lead investigation and mitigation of application-level security incidents with SOC and engineering teams.
Advise on security and privacy controls for AWS cloud infrastructure, application development, and IoT hardware.
Research emerging cybersecurity risks and recommend mitigation strategies.
Secure LLM integrations and implement appropriate security guardrails using cloud-native security tools.

Requirements

4–6 years of experience in application security, including developing and maintaining security policies and collaborating with engineering and release teams.
Experience identifying and remediating application vulnerabilities in Elixir, JavaScript, Ruby, Python, or similar languages.
Strong knowledge of the OWASP Top 10, OWASP API Top 10, JWT, and OAuth.
Hands-on experience with SAST, DAST, and SCA platforms such as GHAS, Burp Suite, or Fortra.
Experience with cloud security controls, AWS-native tools, web application firewalls, or similar technologies.
Experience managing or supporting vulnerability disclosure or bug bounty programs.
Strong written and verbal communication skills for explaining security requirements to technical teams.
Demonstrated problem-solving and analytical skills in identifying and mitigating application security risks.
Preferred certifications include CSSLP, GIAC GWAPT, CEH, or equivalent security certifications.
Preferred experience includes CloudFlare, AWS security services, SDLC security integration, threat modeling, and application security architecture reviews.

Benefits

Medical, dental, vision, and life insurance for US employees with low deductibles and 75–100% employer contributions.
Flexible and generous paid time off.
401(k) plan with employer contributions.
Paid parental leave.
Discounted pet insurance and legal services plans.
Employee stock purchase plan.
Candidates outside Arizona may apply.

SmartRent

SmartRent is the leading provider of smart communities and smart operations solutions for the rental housing industry. SmartRent's platform, comprised of smart hardware and cloud-based SaaS solutions, gives operators seamless visibility and control over real estate assets, empowering them to simp...

Similar positions

Senior Software Engineer

Curai
Full time

USA
09/13/2026
Salary: $170k-$210k

Remote

Senior Full Stack Engineer

Entefy
Full time

USA
09/13/2026

Remote

Senior Frontend Software Engineer

Entefy
Full time

USA
09/13/2026

Remote

Staff Mobile Engineer, Tech Lead

Gametime United
Full time

USA
09/13/2026
Salary: $214k-$251k

Remote

Senior Fullstack Engineer, Marketing

GitLab
Full time

UK
09/13/2026

Remote