7 hours ago
Base Salary
$200k - $240k/yr
Responsibilities
- Educate and train development teams on secure coding practices and emerging security threats.
- Perform technical security assessments and code reviews across Java/Spring services.
- Conduct threat modeling and develop strategies to mitigate potential security threats.
- Build security libraries, repeatable patterns, and paved-road components for new features.
- Own and tune SAST, DAST, software composition analysis, and secrets-scanning tooling in CI/CD pipelines.
- Triage security findings, prioritize remediation, and partner with engineering to address authentication and authorization gaps.
- Collaborate with Detection & Response and offensive security teams to turn findings into durable detections and prevention.
- Contribute to secure SDLC standards and developer security guardrails.
Requirements
- At least 4 years of experience working as an Application Security Engineer or Product Security Engineer.
- Extensive experience with security assessments, security design reviews, or threat modeling.
- Hands-on secure code review experience with Java/Spring or similar technologies.
- Experience operating SAST, DAST, software composition analysis, and secrets-scanning tooling in a CI/CD pipeline.
- Bachelor of Arts or Bachelor of Science degree in a relevant field such as Computer Science, Computer Engineering, or Information Security, or relevant experience.
- Ability to work independently and quickly become proficient with modern technology stacks such as Java, Spring, Terraform, and Kubernetes.
- Preferred experience in regulated environments, fintech, or financial services.
- Preferred experience building AppSec automation or developer paved roads.
- Preferred AWS and API security experience.
- Relevant certifications such as CSSLP, GWAPT, or OSCP are a plus.
Benefits
- Hybrid schedule with three days per week onsite in the San Francisco FiDi or Culver City office.
- Premium healthcare, dental, and vision insurance plans, including HMO and PPO options.
- 401(k) savings plan with a 4% match and immediate vesting.
- 16 weeks of paid parental leave after one year of employment.
- Professional growth opportunities, an employee mobility program, and an annual learning and development budget.
- Company perks program with discounts on pet insurance, fitness, cell phone plans, and travel.
- Financial guidance program covering debt, personal spending, saving, planning, and home-purchasing preparedness.
- One month work-from-anywhere policy, subject to country exceptions.
Tech Stack
Categories
About Altruist
Altruist builds a custodian and wealth management platform for independent registered investment advisors, combining account opening, trading, portfolio management, billing, and reporting in one system. The company generates revenue as a brokerage custodian and through advisor software and services. Founded in 2018 and headquartered in Culver City, California, it is privately held and serves RIAs across the United States.