Staff Security Engineer (Application Security)

Location: Hybrid from offices in New York City, San Francisco, or Seattle, United States

Base compensation: $204K–$240K in San Francisco and New York City; $183K–$216K in other US locations, plus equity.

Company

Writer is an enterprise AI platform that provides autonomous agents, enterprise intelligence, governance, and compliance for marketing and revenue teams.

What you will do

• Conduct threat modeling with product teams and design secure architectures for AI platform features.
• Own and evolve the application security program, including SAST/DAST in CI/CD, critical code reviews, and vulnerability-prevention automation.
• Establish secure coding standards, reusable security patterns, and libraries that enable secure-by-default development.
• Design security features and controls for customer environments, data pipelines, model training environments, and customer-facing AI agents.
• Lead security assessments and penetration testing for applications, AI services, and APIs, coordinating remediation at scale.
• Research LLM and generative AI attack vectors and use AI agents to improve security-team and engineering velocity.

Requirements

• At least 4 years of hands-on application security engineering experience securing large-scale production systems.
• Understanding of developer experience and workflows, with the ability to reduce risk without unnecessarily slowing engineering velocity.
• Technical expertise in at least two of Python, Java, Go, and JavaScript/TypeScript, including code review across multiple languages and analysis of business logic and security implications.
• Knowledge of SAST/DAST solutions, vulnerability management platforms, security testing frameworks, and DevSecOps practices.
• Excellent communication skills for explaining complex security concepts and motivating technical and non-technical audiences to act.
• A builder’s mindset focused on automation, scalability, enablement, and reducing security bottlenecks.
• Alignment with the values of Connect, Challenge, and Own.
• Open to mid, senior, and staff-level candidates.

Nice to have

• Experience in fast-growing startups or high-growth environments.

Culture & Benefits

• Hybrid work from the New York City, San Francisco, or Seattle offices.
• Generous PTO, company holidays, and 16 weeks of paid parental leave for all parents.
• Medical, dental, vision, fertility and family-planning support, early-detection cancer testing, FSA options, and eligible HSA contributions.
• Wellness and learning-and-development stipends.
• Company-wide and team off-sites, stock options, and a 401(k).