Application Security Engineer

About the company

Our client is a fast-growing software company.

The role

Raydar is recruiting for this role on behalf of our client. Own the security of application code and software features, from secure development standards and code review through threat modeling, security tooling and protection of sensitive data. Work closely with engineers to build protections in from the start and to define safe design patterns for automated software components.

What you'll do

- Set secure development standards for authentication, authorization, secrets handling and input validation that engineers can adopt easily.

- Embed security checks in code review, build pipelines and pre-release testing to catch risks before release.

- Run threat modeling on feature work and turn findings into practical controls.

- Build security tooling and automated scans that extend coverage across the codebase, using AI to speed up review.

- Define secure patterns for software that calls third-party services and automated components, including credential storage, response validation and permission limits.

- Create reusable guidelines, checklists and code-level guardrails for development teams.

- Produce security reviews and documentation to support product releases.

- Establish and apply rules for guarding sensitive information inside software, covering who can view it, what gets screened on the way out and how activity is recorded for later review.

Requirements

What we're looking for

- Experience in application or product security on production systems at scale.

- Working proficiency in Python, Go or TypeScript for tooling and automation.

- Strong grounding in application security fundamentals, including common web vulnerability classes, authentication and authorization, secure development lifecycle, secrets management, secure integrations and basic cryptography.

- Understanding of the security risks in automated software that takes actions and calls tools, including design, permission scoping and risk review.

Bonus points

- Computer science degree, or equivalent experience.

- Familiarity with compliance frameworks such as FedRAMP, HIPAA, SOC 2 or ISO 27001.

Benefits

Compensation and benefits

- Base salary: $220K - $300K

- Equity

- Health, dental and vision coverage

- Paid parental leave

- Retirement plan

- Flexible time off

- Commuter benefits

Location and work model

- San Francisco, California, United States

- Hybrid with 3 days in-office, or remote in US/UK

- Full-time