Senior Application Security Engineer at Jobgether – United States

This position is posted by Jobgether on behalf of a partner company. We are currently looking for a Senior Application Security Engineer in the United States.

This role is an exciting opportunity to shape the security posture of high-impact web3 applications, focusing on protecting user assets, identities, and digital interactions. You will work closely with development teams to embed security into the software development lifecycle, influence secure design practices, and respond to emerging threats in a rapidly evolving environment. The position offers hands-on coding, vulnerability management, and collaboration with ethical hackers, allowing you to directly impact the safety and reliability of widely used applications. You will also have the opportunity to innovate through automation, AI-assisted vulnerability detection, and security tooling. Success in this role ensures that user trust is maintained at scale while providing mentorship and guidance to engineering teams. It is ideal for self-driven engineers passionate about security, web3, and building resilient, user-focused systems.

• Conduct security design reviews, threat modeling, and code audits to ensure secure application development
• Identify, triage, and remediate vulnerabilities reported through bug bounty platforms or internal testing
• Collaborate with development teams to implement security fixes and preventative measures
• Develop and maintain security automation, tooling, and AI-assisted processes to streamline vulnerability detection and resolution
• Provide guidance on secure software development practices, SSDLC improvements, and operational security standards
• Mentor engineers on security best practices, embedding a culture of security throughout product teams
• Participate in roadmap planning, team meetings, and cross-functional initiatives to strengthen application security

• 6+ years of experience in software development and application security, including at least 4 years in a product or application security role
• Hands-on experience securing web applications, APIs, and server-side environments
• Strong background in vulnerability assessment, threat modeling, and secure code reviews
• Proficiency in coding and software development, with a focus on integrating security into the SDLC
• Excellent communication skills, both written and verbal, and proactive, self-driven work style
• Familiarity with modern web and mobile application security risks and mitigations
• Preferred: experience with Ethereum, decentralized applications, and familiarity as a MetaMask user

• Competitive salary range ($130,000 – $218,000 USD, depending on experience and skills)
• Remote work flexibility across most time zones with some overlap with EU and US-Pacific time zones
• Equity and performance-based bonuses (subject to eligibility)
• Comprehensive healthcare coverage including medical, dental, and vision plans
• Paid parental leave and family-forming benefits including fertility, adoption, and surrogacy support
• Professional development opportunities, career growth, and mentorship programs
• Collaborative, high-trust environment promoting autonomy, learning, and innovation