Назад
Company hidden
1 день назад

Senior Application Security Engineer (Cybersecurity)

139 000 - 250 000$
Формат работы
remote (только USA)
Тип работы
fulltime
Грейд
senior
Английский
b2
Страна
US/Canada
Вакансия из списка Hirify.GlobalВакансия из Hirify RU Global, списка компаний с восточно-европейскими корнями
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/

TL;DR

Senior Application Security Engineer (Cybersecurity): Secure hirify.global’s web application platform and ecosystem with an accent on secure coding, tooling, and development procedures. Focus on threat modeling, vulnerability mitigation, security program management, and integrating AI-driven automation for scalable security reviews.

Location: Remote-first (United States; BC & ON, Canada only)

Salary: United States (USD): Zone A $158,000–$238,000; Zone B $149,000–$224,000; Zone C $139,000–$210,000. Canada (CAD, ON & BC): $199,000–$250,000. Eligible for company-wide bonus.

Company

Pioneer of the Website Experience Platform (WXP) combining visual development, CMS, AI personalization, hosting, and analytics to empower teams to build and scale web experiences.

What you will do

  • Collaborate with engineering to secure the web application platform and ecosystem.
  • Integrate security best practices into the software development lifecycle.
  • Champion security standards while balancing business needs.
  • Support compliance frameworks and find vulnerabilities via grey-box techniques, proposing architecture and code solutions.
  • Contribute code and improvements to enable security for engineers.
  • Cross-train entry-level application security engineers.

Requirements

  • BA/BS or equivalent experience.
  • 5+ years application security experience with hands-on software development on high-complexity, large-scale applications.
  • Expertise in secure software design, coding, modern web app security, identifying design flaws and business-logic vulnerabilities, driving risk-based remediation.
  • Experience leading threat modeling, penetration testing, or managing third-party pentests.
  • Managed application security programs/tooling (SCA, SAST, DAST) or bug bounty programs.
  • Contributed security controls to large-scale solutions, designing/delivering features like authorization models.
  • Experience with AI automation for security reviews and incident response.

Culture & Benefits

  • Equity ownership (RSUs).
  • 100% employer-paid healthcare, vision, dental for full-time employees and dependents.
  • 12 weeks paid parental leave + pregnancy disability leave; family planning support.
  • Flexible PTO, sabbatical program.
  • Mental wellness, coaching, EAP, monthly work/wellness stipends.
  • 401k or pension, financial wellness benefits.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →