Senior Application Security Engineer (Web3)

TL;DR

Senior Application Security Engineer (Web3): Designing and implementing secure architectures and tooling for a global crypto platform with an accent on threat modeling, penetration testing, and AI-enhanced security automation. Focus on building AI agents for secure code review, mitigating vulnerabilities in trading systems, and embedding security into the SDLC.

Location: Hybrid in New York, NY (required to be in person twice a week)

Salary: $140,000 – $200,000

Company

A global crypto and Web3 platform providing secure financial services to individuals and institutions in over 70 countries.

What you will do

• Lead secure design reviews, threat modeling, and penetration testing for high-risk products including crypto custody and trading systems.
• Design and build AppSec tooling, specifically AI agents for secure design and code review.
• Develop AI-enhanced SAST/DAST pipelines and automation to eliminate repeatable security toil.
• Partner with engineering teams to remediate vulnerabilities and drive improvements in secure coding practices.

Requirements

• 5+ years of experience in application security or similar roles.
• Ability to perform design reviews, threat modeling, and penetration testing with an attacker mindset.
• Experience building or contributing to security tooling and automation.
• Proficiency in development or scripting (Python, Scala, C++, or JavaScript).
• Must be based in New York, NY and available to work from the office twice a week.

Nice to have

• Experience building AI application security tooling using agents.
• Familiarity with supply chain security frameworks (SLSA, OWASP SPVS).
• Experience in highly regulated environments such as fintech or crypto.
• Knowledge of microservice architectures and cloud-native environments.

Culture & Benefits

• Competitive base salary, discretionary annual bonus, and new hire equity grants.
• Comprehensive health plans and 401K with company matching.
• Paid Parental Leave and flexible time off.
• Hybrid work approach balancing in-person collaboration and remote flexibility.