Security Engineer, Application Security
Quartermaster · Remote · United States ·
COMPENSATION
€•• – ••k
Listed on the employer's job board (Ashby)
- Senior level role
- Fully remote (US)
- US citizenship required
- Python, Go, Rust
- Cloud & Edge security
Join Quartermaster AI to protect software running in contested maritime environments. You will own application security for cloud services and distributed edge systems, ensuring secure-by-default patterns from design to deployment.
This hands-on senior position offers broad autonomy to shape the secure software development lifecycle. You will partner with engineering teams to integrate security tooling, perform code reviews, and drive vulnerability remediation without acting as a gatekeeper.
What you'll do
- Lead threat modeling and secure design reviews for new services
- Perform whitebox, greybox, and blackbox security assessments
- Integrate SAST, DAST, and SCA tools into CI/CD pipelines
- Drive vulnerability remediation by partnering with engineering teams
- Build automation to make secure coding the default path
- Manage vulnerability disclosure and bug bounty processes
- Strengthen software supply chain security and build integrity
- Deliver developer-focused security training and enablement
What you'll need
- 5–8 years in application security or software engineering
- Proficiency in Python, Go, Java, JS/TS, Rust, or C/C++
- Experience with SAST, DAST, SCA, and CodeQL integration
- Strong knowledge of OWASP Top 10, CWE, and secure coding
- Experience securing microservices, APIs, and cloud environments
- Proven track record in driving vulnerability remediation
- Must be a U.S. citizen
- Bachelor’s degree in Computer Science or equivalent experience
Nice to have
- Active U.S. security clearance or eligibility
- Certifications like OSCP, OSWE, or CSSLP
- Experience with SLSA, Sigstore, and artifact signing
- Familiarity with Terraform and Kubernetes security
- Background in defense, intelligence, or startup environments
- Contributions to bug bounty programs or open-source security
Stack
- Python
- Go
- Java
- JavaScript
- TypeScript
- Rust
- C/C++
- CodeQL
- AWS
- Azure
- GCP
- Kubernetes
- Terraform
How you'll work
- Fully remote work policy
- Flexible working hours
- Must be located in the United States
What you get
- Competitive salary package
- Comprehensive medical benefits
- Dental and vision coverage
- High autonomy in shaping security standards
- Career growth in defense-tech sector