[Hiring] Senior Application Security Engineer @Quanata's Veterans Job Board

Role Description

As a Senior Application Security Engineer , you’ll be a key security partner to our web and backend engineering teams, helping build security into every stage of the software development lifecycle.

You’ll work closely with a product portfolio to guide product security, with particular emphasis on AI/ML security considerations and collaboration with data science teams. From secure design and threat modeling to code reviews and vulnerability remediation, you’ll help engineering teams identify and address security risks early.

This role is ideal for someone who combines deep application security expertise with a developer-focused mindset. You’ll bridge frontend, backend, and API security while helping engineers solve complex security challenges and strengthen secure development practices across the organization.

Your Day-to-Day

• Partner with a product portfolio to manage product security, with a strong emphasis on AI/ML automation, security consulting, and cross-functional collaboration with non-portfolio teams.
• Lead security design reviews and threat modeling for APIs, web features, and service integrations.
• Integrate security tooling—including SAST, SCA, and DAST—into CI/CD pipelines and developer workflows.
• Review source code and deployment configurations to identify security vulnerabilities, and partner with developers to triage, remediate, and validate findings.
• Support secure development practices across engineering teams, including maintaining AppSec guidance and contributing to security awareness and enablement.
• Develop and deploy AppSec automation and integrations, utilizing AI/ML as possible, including ASVS scanning and Burp Suite Enterprise.
• Support application security integration reviews, SaaS security assessments, and open-source software reviews.
• Participate in cross-functional incident response and remediation planning.

Qualifications

• Bachelor’s degree or equivalent relevant experience.
• 6–8 years of experience in application security or full-stack development with security expertise.

Requirements

• Strong understanding of secure coding practices in Python, JavaScript/TypeScript, Node.js, and web standards.
• Familiarity with application risks and vulnerabilities, including the OWASP Top 10 (web and GenAI LLM), API security, SSRF, and related security concerns.
• Experience with code scanning tools such as CodeQL, Wiz, SonarQube, or Snyk.
• Comfortable reading and debugging complex codebases across the technology stack.

Bonus Points

• Experience with GraphQL security.
• Participation in security champions programs or secure SDLC rollouts.
• Contributions to open-source security tooling.
• Familiarity with infrastructure-as-code and container security.
• Experience automating security and developing with AI/ML.

Benefits

• We provide a wide variety of health, wellness, and other benefits including medical, dental, vision, life insurance, and supplemental income plans for you and your dependents.
• Headspace app subscription, monthly wellness allowance, and a 401(k) Plan with a company match.
• A one-time payment of $2K for in-home office equipment and furniture.
• All employees accrue four weeks of PTO in their first year of employment.
• New parents receive twelve weeks of fully paid parental leave.
• Up to $5000 each year for professional learning, continuing education, and career development.
• LinkedIn Learning subscriptions and access to coaching opportunities through BetterUp.

Location

We are a remote-first company for most positions, allowing you to work from anywhere in the U.S., excluding U.S. territories. Occasional travel may be requested or encouraged but is not required.

Hours

We maintain core meeting hours from 9AM - 2PM Pacific time for collaborating with team members across all time zones.

Company Description

Quanata, LLC is an equal opportunity workplace. We are committed to equal employment opportunities regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity, or Veteran status.