Senior Application Security Engineer
Monarch Money3 months ago
Base Salary
$180k - $215k/yr
Responsibilities
- Conduct threat modeling, code reviews, and risk assessments for new features and major changes across the Django/Python stack.
- Operate and improve SAST/DAST processes, including finding triage, validation, and remediation tracking in CI/CD pipelines.
- Manage the vulnerability backlog, remediation tracking, triage criteria, and escalation paths with engineering teams.
- Perform and coordinate penetration testing and security assessments of web and API surfaces.
- Apply and improve AI security reviews for LLM-integrated features and agentic attack surfaces, including prompt injection, data leakage, model abuse, and supply chain risk.
- Build and maintain security automations and AI-powered tooling, and define and assess security requirements for AI workflows and agentic systems.
- Participate in the weekly security on-call rotation.
Requirements
- At least 5 years of security engineering experience with depth in application and AI security.
- Proficiency in Python and strong knowledge of web application security, OWASP Top 10, API security, and authentication and authorization patterns.
- Hands-on experience with application security tools such as Semgrep, Burp Suite, Nuclei, or equivalent tools.
- Familiarity with AI/ML security risks including prompt injection, model abuse, agentic attack surfaces, or LLM supply chain risk.
- Active use of AI tools to accelerate security work and build automation.
- Fintech or financial data security experience is preferred.
- Familiarity with SOC 2, NIST CSF, or similar compliance frameworks is preferred.
- Cloud security experience, particularly with AWS, IAM, container security, ECS, or EKS, is preferred.
- OSCP, BSCP, CSSLP, CISSP, or equivalent certifications are preferred.
- Detection engineering, incident response, red teaming, bug bounty, or broader penetration testing experience is preferred.
Benefits
- Fully remote work with no central office.
- Competitive cash and equity compensation.
- Stipend for setting up a working environment.
- Location-based medical, dental, vision, and 401(k) benefits in the United States.
- Unlimited paid time off.
- Three-day weekend every month with the First Friday off.
About Monarch Money
Monarch Money builds a subscription-based personal finance platform for individuals and households, offering budgeting, account aggregation, investment tracking, and goal planning. The company launched in 2021 and is headquartered in San Francisco. It is privately held and venture-backed (Series B), serving consumers looking to consolidate financial data and manage money across accounts in one place.