Security Engineer

Security Engineer at Merge, the B2B integrations platform, acting as the primary owner of product and application security and working directly with the Head of Security. The engineer covers APIs, integrations, agent tooling and AI features through security reviews, threat modelling and code review, drives vulnerability remediation across the SDLC, builds out SAST, DAST and CI/CD security testing, uses AI to probe system resilience, runs the bug bounty programme end to end and helps with cloud security where it touches the product.

Merge wants three to six or more years in security engineering focused on product or application security, strong OWASP and API security knowledge, hands-on AppSec tooling, real coding ability and SaaS or multi-tenant experience. The role is based in San Francisco.