Summary
What you’ll impact
Our company is seeking a Senior Application Security Engineer to lead the technical execution of its product security strategy for high‑growth FinTech and Web3 platforms. The role involves building end‑to‑end security programs, integrating automated controls into the software development lifecycle, and securing cloud, AI, and blockchain‑adjacent technologies. The position is full‑time onsite at the San Francisco office.
Responsibilities
What you'll do
- Lead comprehensive threat modeling and product security architecture reviews in collaboration with cross-functional teams.
- Integrate security automation into CI/CD pipelines utilizing SAST, DAST, and continuous vulnerability management tools.
- Architect and implement secure-by-default cloud infrastructure on AWS using Terraform and Kubernetes.
- Design and deploy robust encryption services, key management systems (KMS), and advanced data protection controls across distributed environments.
- Oversee operational security initiatives including corporate bug bounty programs, incident response workflows, and regular penetration testing engagements.
- Secure next-generation AI-integrated applications by establishing input/output validation protocols and LLM guardrails.
- Engineer proactive defenses to safeguard platform infrastructure against sophisticated adversaries and nation-state-level threats.
Requirements
What you’ll bring
- 8+ years of experience engineering and scaling end-to-end security programs for high-growth startups.
- Proven background securing platforms within FinTech, Web3, and digital asset ecosystems.
- Strong engineering proficiency in distributed systems, microservices, and languages such as Python or Java.
- Hands-on mastery of container security, Kubernetes orchestration, and AWS infrastructure hardening.
- Practical knowledge of implementing technical controls to meet SOC 2 Type II and GDPR compliance standards.
- Deep expertise in securing AI/ML lifecycles, MLOps frameworks, and agentic AI platforms.
- Bachelor’s degree in Computer Science, Engineering, or an equivalent technical field.