Senior Application Security Engineer

Monarch Money · Remote · Remote (US) · Remote (Canada) ·
Fully remoteFull-timeSenior5+ years
COMPENSATION
$180k – $215k
0 applicants so far

Listed on the employer's job board (Ashby)

  • Senior level role
  • Fully remote worldwide
  • Python + Django stack
  • AI security focus
  • SAST/DAST operations

Join Monarch's Security Engineering team to protect sensitive financial data for over a million users. You will embed with product teams to conduct security reviews, manage vulnerabilities, and enhance AI security processes for LLM-integrated features.

What you'll do

  • Conduct threat modeling, code reviews, and risk assessments for new features
  • Manage SAST/DAST operations including triage and remediation tracking
  • Address vulnerability backlog with urgency alongside engineering squads
  • Coordinate penetration testing for web and API surfaces
  • Implement AI security reviews for prompt injection and model abuse risks
  • Build security automations and define requirements for AI workflows
  • Participate in the weekly security on-call rotation

What you'll need

  • 5+ years in security engineering with AppSec and AI security depth
  • Proficiency in Python and strong web application security knowledge
  • Experience with tools like Semgrep, Burp Suite, or Nuclei
  • Familiarity with AI/ML risks such as prompt injection and supply chain issues
  • Active use of AI tools to accelerate security work and automation

Nice to have

  • Experience in fintech or with financial data security requirements
  • Familiarity with SOC 2, NIST CSF, or similar compliance frameworks
  • Cloud security experience with AWS, IAM, and container security
  • Relevant certifications such as OSCP, CISSP, or CSSLP
  • Background in detection engineering, incident response, or red teaming

Stack

  • Python
  • Django
  • Semgrep
  • Burp Suite
  • Nuclei
  • AWS

How you'll work

  • Fully remote with no central office
  • Synchronous collaboration from 9 AM to 2 PM PT
  • Asynchronous work embraced across time zones

What you get

  • Competitive cash and equity compensation
  • Stipend for home office setup
  • Location-based medical, dental, and vision plans
  • Unlimited paid time off
  • Three-day weekend every month (First Friday off)

Hiring process

  • Recruiter video call
  • Hiring manager video call
  • Take home assignment
  • Virtual onsite round with 2–4 interviews
  • Reference checks
  • Offer