8 hours ago
Base Salary
$170k - $225k/yr
Responsibilities
- Educate and train development teams on secure coding practices and emerging security threats.
- Perform technical security assessments, security design reviews, threat modeling, and secure code reviews across Java/Spring services.
- Build security libraries, repeatable patterns, and paved-road components for new features.
- Own and tune SAST, DAST, software composition analysis, and secrets-scanning tools in CI/CD pipelines.
- Triage security findings, prioritize remediation, and partner with engineering to address authentication, authorization, and systemic security gaps.
- Collaborate with Detection & Response and offensive security engineers to convert findings into durable detections and prevention.
- Contribute to secure SDLC standards and developer security guardrails.
Requirements
- At least 4 years of experience as an Application Security Engineer or Product Security Engineer.
- Extensive experience with security assessments, security design reviews, or threat modeling.
- Hands-on secure code review experience with Java/Spring or similar technologies.
- Experience operating SAST, DAST, software composition analysis, and secrets-scanning tools in CI/CD pipelines.
- Bachelor’s degree in a relevant field such as Computer Science, Computer Engineering, or Information Security, or relevant experience.
- Ability to work independently and quickly learn modern technology stacks such as Java, Spring, Terraform, and Kubernetes.
- Preferred experience includes regulated environments, fintech or financial services, AppSec automation, developer paved roads, AWS, and API security.
- Relevant certifications such as CSSLP, GWAPT, or OSCP are preferred.
Benefits
- Hybrid schedule with three days per week onsite in the San Francisco FiDi or Culver City office.
- Premium HMO and PPO healthcare, dental, and vision insurance plans.
- 401(k) savings plan with a 4% match and immediate vesting.
- 16 weeks of paid parental leave after one year of employment.
- Professional growth opportunities, an employee mobility program, and an annual learning and development budget.
- Company perks program with discounts on pet insurance, fitness, cell phone plans, travel, and other services.
- Financial guidance program covering debt, spending, saving, planning, and home-purchasing preparedness.
- One month work-from-anywhere policy, subject to country restrictions.
Tech Stack
Categories
About Altruist
Altruist builds a custodian and wealth management platform for independent registered investment advisors, combining account opening, trading, portfolio management, billing, and reporting in one system. The company generates revenue as a brokerage custodian and through advisor software and services. Founded in 2018 and headquartered in Culver City, California, it is privately held and serves RIAs across the United States.