Staff security engineer, application security
Writer · New York, NY; San Francisco, CA; Seattle, WA
About the role
A staff application security engineer at WRITER, hybrid from its New York, San Francisco or Seattle office and reporting to the head of security engineering, who builds the security foundations of its enterprise AI platform. The engineer runs threat modelling with product teams and designs secure architectures, owns the application security programme including SAST and DAST in CI/CD and code reviews, sets secure coding standards and reusable patterns, leads assessments and penetration tests of applications, AI services and APIs, designs controls for data pipelines, training environments and customer-facing agents, and uses AI agents to speed up security work.
It asks for four years of hands-on application security on large production systems, two or more languages such as Python, Java, Go or TypeScript, and SAST, DAST and DevSecOps tooling. Mid, senior and staff candidates are considered.