Staff Security Engineer, Application Security

4 days ago

Remote, United States or Chicago, IL, USAStaff+

Base Salary

$210k - $260k/yr

Responsibilities

Own security domains including vulnerability management, application security, API security, and supply chain security.
Improve security coverage, prioritization, remediation workflows, SLAs, metrics, and reporting.
Partner with engineering teams on design reviews, threat modeling, CI/CD pipelines, developer workflows, and secure product delivery.
Develop security tooling and automation and implement or tune SAST, SCA, DAST, dependency security, and container security tools.
Triage and prioritize vulnerabilities, drive remediation of critical issues, and identify systemic risks.
Conduct security assessments and contribute to incident response and postmortems for security events.
Leverage AI/LLMs where appropriate to improve triage, detection, and review processes.

7+ years of experience in Application Security, Product Security, or Security Engineering.
Strong hands-on experience with threat modeling and secure design.
Experience with vulnerability management and application security tooling.
Experience working in cloud-native environments such as AWS and GCP.
Experience integrating security into CI/CD pipelines and developer workflows.
Ability to write code in Python, Go, or similar languages for automation and tooling.
Strong ability to work cross-functionally with engineering teams.
Preferred qualifications include experience scaling security in a high-growth or late-stage startup, AI-driven security workflows, API security, data protection, multi-tenant systems, bug bounty programs, penetration testing, or CISSP certification.

$210,000.00-$260,000.00 USD salary range plus a 12% annual target bonus.
401(k) plan through ADP with up to a 3.5% company match.
23 days of annual paid time off, seven paid holidays, five conditional holidays, and one service day.
Paid parental bonding leave, health, vision, and dental coverage, and life and disability insurance fully covered by NinjaTrader.
Chicago-based hybrid schedule with in-office work Tuesday through Thursday and remote work Monday and Friday.
20 additional flex remote days annually and five company-wide office-optional weeks tied to major holidays.
Remote flexibility may be available for exceptional candidates in specified states.

501-1,000 employees