Senior Application Security Engineer

#vacancy #appsec #securityengineer #remote

Senior Application Security Engineer at TaxDome 💙

🔐 If you’re passionate about building secure-by-design products, shaping AppSec strategy, and integrating security deeply into the development lifecycle — this role is for you.

🔧 Tech stack:
Ruby on Rails · TypeScript · React · GitHub Actions · SAST · DAST · SCA · IAST · AWS · Docker · Kubernetes · BSIMM · OWASP · CI/CD

👤 Who we're looking for:
— 5+ years of software engineering or DevOps experience
— 3+ years in Application Security
— Strong knowledge of OWASP Top 10, CWE, threat modeling
— Ability to perform manual code reviews in Ruby/TypeScript
— Experience integrating security tools into CI/CD
— Strong communication skills and ability to work closely with developers
— Self-driven, proactive, and comfortable owning the AppSec roadmap

📌 What you’ll be doing:

Program & Strategy:
— Building and maturing the AppSec program using BSIMM
— Leading threat modeling sessions and secure design reviews
— Setting security standards, policies, and best practices

Tooling & Automation:
— Selecting and managing AppSec tools (SAST/DAST/SCA/IAST)
— Integrating security checks into CI/CD pipelines
— Automating developer-friendly security workflows

Collaboration & Enablement:
— Guiding developers through vulnerability remediation
— Running a Security Champions program
— Supporting incident response with application-layer expertise

⭐ Why this role matters

You’ll define how security is built into a fast-growing SaaS platform — shaping the strategy, tooling, processes, and culture across engineering.

🌍 Format: remote-first
💰 Salary: $4,000 – $6,000

👉 Apply / contact: Показать контакты