Application Security Engineer - Assistant Vice President

Location: Salt Lake City, Utah, United States; office attendance is required Monday through Thursday, with remote work available on Friday.

Salary: $100,000–$130,000 per year, plus equity and an annual performance bonus.

Company

hirify.global provides technology and services for the wealth management and financial services industry.

What you will do

• Support threat modeling and secure design reviews across a growing portfolio of services.
• Advance shift-left security, CI/CD security, developer guidance, and SAST/SCA remediation workflows.
• Assess API exposure and validate authentication and authorization patterns across REST and GraphQL APIs.
• Build Python automation for triage tooling, finding pipelines, and security context enrichment.
• Partner with developers to remediate findings, reduce false positives, and strengthen secure development practices.

Requirements

• Hands-on experience with secure design, threat modeling, API security, offensive security, or SAST/SCA programs.
• Practical understanding of attack patterns, exploitation techniques, OWASP Top 10, and web application security.
• Experience assessing REST and GraphQL APIs.
• Ability to build and maintain scalable security automation in Python.
• Ability to work autonomously while helping establish processes in a developing AppSec program.

Nice to have

• Relevant security certifications and experience in cloud-native environments.
• Exposure to AI/LLM security.
• Previous developer or engineering experience, with familiarity in Ruby, Python, and Scala.

Culture & Benefits

• Hybrid schedule with four office days and remote work on Fridays.
• Equity for full-time employees and an annual performance bonus.
• Employer-matched retirement plan.
• Subsidized healthcare, employer-paid dental and vision coverage, telemedicine, and virtual mental health counseling.
• Parental leave and unlimited paid time off.