Senior Application Security Engineer
Monarch Money2 months ago
Base Salary
$180k - $215k/yr
Responsibilities
- Conduct threat modeling, code reviews, and risk assessments for new features and major changes across the Django/Python stack.
- Operate and improve SAST/DAST processes, including finding triage, validation, and remediation tracking in CI/CD pipelines.
- Manage the vulnerability backlog, remediation tracking, triage criteria, and escalation paths with engineering teams.
- Perform and coordinate penetration testing and security assessments of web and API surfaces.
- Apply and improve AI security reviews for LLM-integrated features and agentic attack surfaces, including prompt injection, data leakage, model abuse, and supply chain risk.
- Build and maintain security automations and AI-powered tooling, and define and assess security requirements for AI workflows and agentic systems.
- Participate in the weekly security on-call rotation.
Requirements
- At least 5 years of security engineering experience with depth in application and AI security.
- Proficiency in Python and strong knowledge of web application security, OWASP Top 10, API security, and authentication and authorization patterns.
- Hands-on experience with application security tools such as Semgrep, Burp Suite, Nuclei, or equivalent tools.
- Familiarity with AI/ML security risks including prompt injection, model abuse, agentic attack surfaces, or LLM supply chain risk.
- Active use of AI tools to accelerate security work and build automation.
- Fintech or financial data security experience is preferred.
- Familiarity with SOC 2, NIST CSF, or similar compliance frameworks is preferred.
- Cloud security experience, particularly with AWS, IAM, container security, ECS, or EKS, is preferred.
- OSCP, BSCP, CSSLP, CISSP, or equivalent certifications are preferred.
- Detection engineering, incident response, red teaming, bug bounty, or broader penetration testing experience is preferred.
Benefits
- Fully remote work with no central office.
- Competitive cash and equity compensation.
- Stipend for setting up a working environment.
- Location-based medical, dental, vision, and 401(k) benefits in the United States.
- Unlimited paid time off.
- Three-day weekend every month with the First Friday off.
About Monarch Money
Monarch is the most comprehensive platform for managing your personal finances.