Application Security Engineer

One is a fintech company backed by Ribbit and Walmart, creating simple solutions to help customers save, spend, borrow, and grow their money in one place.
$175,000 - $220,000
Security
Senior Software Engineer
Remote
4+ years of experience
Finance

Description For Application Security Engineer

One is an innovative fintech company on a mission to revolutionize financial progress for customers. Backed by prominent investors Ribbit and Walmart, we're creating an all-in-one platform for saving, spending, borrowing, and growing money. We're addressing a crucial gap in the U.S. financial landscape, where millions are underserved by traditional banking systems.

As an Application Security Engineer, you'll play a pivotal role in ensuring the security and reliability of One's financial applications at scale. This position combines technical expertise with strategic thinking, requiring you to partner with engineering teams to embed security from the ground up. You'll be responsible for implementing secure development practices, conducting penetration testing, and developing security frameworks that protect our customers' financial data.

The ideal candidate brings 4+ years of security engineering experience, with deep knowledge of modern security practices, tools, and frameworks. You'll need proficiency in TypeScript, AWS, and security testing tools, along with experience in application architecture and deployment practices. Your expertise in cryptography, regulatory compliance, and security vulnerability assessment will be crucial.

This remote position offers a competitive salary range of $175,000-$220,000, along with comprehensive benefits including equity, 401(k) with match, and flexible time off. You'll join a fast-growing startup environment where you can make a direct impact on financial inclusion while working with cutting-edge security technologies.

If you're passionate about building secure financial systems that help people achieve their financial goals, and you embody our values of being Humble, Hungry, and Honest, this role offers an exceptional opportunity to shape the future of financial technology while growing your career in application security.

Last updated 2 months ago

Responsibilities For Application Security Engineer

  • Ensuring quality and security of applications through Secure Development Lifecycle (SDLC) process
  • Performing SAST/DAST and penetration testing on core services, web and mobile applications
  • Developing and maintaining in-house security testing framework
  • Developing safe libraries and hardening existing frameworks
  • Enforcing SDLC practices via Infrastructure-As-Code policies
  • Validating security posture of new features
  • Triaging and validating security vulnerabilities
  • Training engineers on secure coding practices
  • Contributing to application threat models
  • Maintaining security architecture and controls

Requirements For Application Security Engineer

TypeScript
React
Kubernetes
  • 4+ years of experience in security engineering, DevSecOps, and application development
  • Excellent knowledge of CVSS, MITRE ATT&CK, and OWASP Top 10
  • Proficiency in TypeScript
  • Practical understanding of AWS and core services
  • Experience with modern application architecture and deployment practices
  • Experience with Library/API/Framework development
  • Experience with security scanning tools integration with CI/CD
  • Expertise in verifying common security vulnerabilities
  • Knowledge of cryptography including algorithms and standards
  • Proficiency in security evaluation tooling (Burp, Wireshark, Kali)
  • Understanding of regulatory compliance (GLBA, CCPA, PCI) preferred
  • The Triple H Factor: Humble, Hungry and Honest

Benefits For Application Security Engineer

401k
Equity
Parental Leave
  • Competitive cash compensation
  • Benefits effective day one
  • Generous stock option packages
  • Flexible time off programs
  • Vacation and sick leave
  • Paid parental leave
  • Paid caregiver leave
  • 401(k) plan with match

Interested in this job?

Jobs Related To One Application Security Engineer

GRC Engineer

GRC Engineer role at One, focusing on information security, risk management, and compliance for a leading fintech company.

Application Security Engineer

Senior Application Security Engineer role at xAI focusing on securing cloud-native applications, AI systems, and implementing secure development practices.

Pre-Sales Engineer

Pre-Sales Engineer position at Corelight, focusing on network security solutions implementation and customer technical guidance.

Security Software Engineer

Security Software Engineer role at Canonical focusing on Ubuntu and open source security, vulnerability response, and security feature development.

Pre-Sales Engineer

Join Corelight as a Pre-Sales Engineer to help protect organizations from cyber threats through advanced network security solutions.