[Hiring] Application Security Engineer @MyFitnessPal

Role Description

We are looking for a Security Engineer II with a focus on Application Security to join the MyFitnessPal Security team. Our users rely on MyFitnessPal to power their health and fitness journeys every day, and you will leverage your technical skills to secure the code, applications, and development processes that create the MyFitnessPal product experience.

Essential Duties:

• Own the day-to-day application security vulnerability management: triage findings from SAST, SCA, DAST, and mobile security tooling, assign severity and due dates, propose remediations, and drive tickets through our SVM process to resolution.
• Operate and grow our bug bounty program — scoping engagements, triaging researcher submissions, validating findings, and coordinating with vendors.
• Leverage AI and agentic tooling (for example, Claude Code and agentic pipelines) to accelerate security workflows — from vulnerability triage and enrichment to automated remediation support.
• Build and maintain security automation (for example, in our SOAR platform and with Python) that normalizes vulnerability intake, drives notifications and SLAs, and produces the metrics and reporting that keep the program transparent.
• Partner with product engineering teams on remediation — joining triage and refinement discussions, answering questions, and representing security as a business enabler rather than a blocker.
• Perform security reviews of new features, services, and third-party integrations, providing pragmatic, risk-based guidance.
• Advocate secure coding practices and contribute to developer-facing security documentation and training.
• Administer and tune application security tooling across the SDLC, and help evaluate and implement new security technology.
• Support identity and access management workflows and the automation behind them.

Qualifications

• 2-4 years of experience in security engineering, application security, software engineering, or a closely related role.
• Understanding of application security assessment techniques (e.g., SAST, DAST, SCA, penetration testing) and the steps to remediate findings.
• Knowledge of secure development practices for web and mobile applications (e.g., OWASP Top 10, OWASP MASVS).
• Experience working with AI/agentic-assisted tooling (e.g., Claude Code or similar AI coding assistants, LLM-powered workflows, or agentic automation).
• Experience performing security triage, investigation, and vulnerability management, including communicating findings and remediation guidance to engineers.
• Familiarity with auto-scaling cloud microservices and associated technologies (e.g., containerization, Kubernetes, infrastructure as code).
• Strong communication skills, enabling collaboration across cross-functional teams.
• Ability to create documentation that describes technical details clearly, including for non-technical audiences.
• Ability & desire to learn new product lines and technologies quickly & efficiently.
• Education and/or certifications equivalent to BS in Computer Science or IS related field; GIAC (e.g., GWEB, GCIH), OSCP, CSSLP, Security+, or vendor-specific certifications are a plus.

Requirements

• Experience automating security processes (e.g., Python, SOAR platforms, workflow automation) is strongly preferred.
• Experience with security scanning in CI/CD pipelines and orchestration tools (e.g., GitHub Actions) is a plus.
• Experience operating or triaging for a bug bounty program is a plus.

Benefits

• Healthcare, parental planning, mental health benefits, annual performance bonus, a 401(k) plan and match, responsible time off, monthly wellness and technology allowances, and others.
• Face-to-Face Connections: Opportunities to meet and connect with your team members in person.
• Flexibility At Its Best: Flexible time-off policy with our Responsible Time Off benefit.
• Give Back: Volunteer days off to support what matters most to you.
• Mentorship Program: Matched with a teammate to help scale your skills and propel your growth.
• Family-Friendly Support: Paid maternity and paternity leave, and comprehensive assistance for fertility-related matters.
• Wellness Comes First: Monthly Wellness Allowance for physical and mental well-being.
• Celebrate Greatness: Reward and recognition platform for exceptional contributions.
• Elevate Your Health & Fitness: Access to MyFitnessPal Premium.
• Unlock Your Potential: Access to virtual learning and development library.
• Championing Inclusion: DEI Committee fosters a diverse and inclusive workplace.
• Healthcare Matters: Competitive medical, dental, and vision benefits.
• Secure Your Future: Retirement savings program with competitive employer match.