Senior Application Security Engineer
Savvy Wealthabout 4 hours ago
Base Salary
$220k - $235k/yr
Responsibilities
- Own vulnerability management end to end, identifying and remediating risks across products and infrastructure.
- Build and operate the AppSec tooling pipeline, including secrets scanning and SAST rollout.
- Set and enforce security hygiene standards in codebases, particularly for AI-generated code.
- Partner with the internal AI team to design guardrails for AI-assisted development.
- Secure the SaaS stack by hardening configurations and reviewing third-party integrations.
- Establish conditional access and identity-layer controls in partnership with IT.
- Define cloud and SaaS configuration baselines for operational infrastructure.
- Contribute to detection and response readiness and participate in incident response.
Requirements
- 5+ years of hands-on security engineering experience, particularly in application security.
- Strong software engineering fundamentals with the ability to read, write, and remediate code.
- Deep experience with modern AppSec tools and CI/CD security integration.
- Practical experience securing SaaS environments and designing least-privilege access.
- Working knowledge of cloud security across AWS and/or GCP.
- A pragmatic, risk-based mindset prioritizing real-world exploitation risks.
- Strong perspective on AI-assisted development security and its implications.
- Excellent communication skills and ability to work independently in a fast-paced environment.
Benefits
- Competitive salary and equity package.
- Unlimited PTO plus paid company holidays.
- Access to holistic medical, dental, and vision plans.
- Company 401(k), Commuter, and HSA/FSA plans.
- NYC office located in the heart of Manhattan.
- Lunch and snacks provided in the office.
- Access to virtual mental health care and various support services.