Your browser does not support javascript! Please enable it, otherwise web will not work for you.

Security Engineer, Application Security

Home > Python programming jobs

Security Engineer, Application Security in USA

  • San Francisco, CA

Responsibilities

  • Embed security review workflows and PR-level analysis into the software development lifecycle.
  • Build and tune SAST/DAST pipelines integrated into CI/CD.
  • Create vulnerability management processes based on exploitability and drive findings through verified remediation.
  • Develop secure coding standards and guardrails for more than 50 engineers.
  • Create threat models for new features and architecture changes, including AI data pipelines, payment flows, and multi-tenant boundaries.
  • Operate the bug bounty program by triaging HackerOne reports, validating findings, and driving fixes to closure.
  • Use AI tools to accelerate code review, threat modeling, vulnerability analysis, and security automation.

Requirements

  • Find and fix real vulnerabilities in production applications rather than only running scanners.
  • Have deep web application security knowledge, including OWASP Top 10, attack chains, and business logic flaws.
  • Be strong in at least one of Python, TypeScript, or Go.
  • Have experience building or tuning SAST/DAST tooling such as Semgrep, CodeQL, Snyk, or Burp.
  • Understand modern web frameworks, APIs, and authentication patterns well enough to threat model them.
  • Have experience managing vulnerability pipelines from discovery through prioritization and verified remediation.
  • Have at least 5 years of professional experience in application security, security engineering, or software engineering with a strong security focus.
  • Bonus qualifications include bug bounty operations with HackerOne or Bugcrowd, penetration testing, AI/ML application security, supply chain security, custom security tooling, open source security contributions, or published vulnerability research.

Benefits

  • Bi-annual performance bonus structure.
  • Generous equity grant vested over four years.
  • Up to $15,000 relocation bonus.
  • $10,000 housing bonus for employees living within 0.5 miles of the office.
  • $1,500 monthly meal stipend.
  • Free Equinox membership.
  • $200 monthly laundry reimbursement.
  • $200 monthly personal wellness reimbursement.
  • Health, dental, and vision insurance.
  • In-person work five days per week in San Francisco, New York City, or London, with first Fridays remote.

Salary: $130k - $400k/yr

Mercor

We find the best experts in every professional domain and put their knowledge to work training frontier models. Through APEX, we measure whether those models can actually perform economically valuable work. We're also bringing that expertise to enterprises: deploying custom AI agents, staffing te...

Similar positions

Senior Software Engineer, ML Ops

  • PathAI
  • Full time
  • USA
  • 09/13/2026
  • Salary: $128k - $196k/yr
  • Boston, MA

Applications Developer Associate

  • Texas Children's Hospital
  • Full time
  • USA
  • 09/13/2026
  • Houston, TX

Senior Security Engineer

  • GitLab
  • Full time
  • Remote
  • 09/13/2026
  • Israel, Poland

Partner 20, Staff Security Engineer

  • a16z
  • Full time
  • USA
  • 09/13/2026
  • Salary: $243k - $284k/yr
  • San Francisco, CA

Staff Security Engineer

  • Canva
  • Full time
  • Australia
  • 09/13/2026
  • Sydney

Listings

by


Job Type

Language

Country

CodingJobBoard.com © 2026