Staff Application Security Engineer
Upside · Remote · DC · Chicago · NYC · Austin ·
COMPENSATION
$235k – $245k
Listed on the employer's job board (Ashby)
- Staff level security role
- Remote-first (US-based)
- Python + AWS security
- AI security focus
- Equity + Day 1 benefits
You will own the application security program at Upside, working with Cloud Security and Engineering teams to scale secure software delivery. The position focuses on reducing risk across mobile, web, backend, and AI systems by driving remediation and creating practical security guidance for developers.
The role requires balancing traditional security tasks with AI integration, using automation to handle finding volumes and securing the AI systems the company ships. You will establish standards, manage vulnerability pipelines, and implement guardrails that prevent recurring defects.
What you'll do
- Own the application security program, standards, and vulnerability management pipeline
- Drive vulnerability outcomes by triaging findings and partnering with engineering on fixes
- Lead security reviews and threat models for mobile, web, backend, and AI systems
- Extend AI automation for triage, prioritization, and remediation guidance
- Build scalable guardrails including repository baselines and GitHub required checks
- Establish secure-by-default patterns for AWS workloads and reusable templates
- Manage a security champions program to extend reach beyond the core team
What you'll need
- 6+ years in application/product security or secure software engineering
- Strong Python code review skills with ability to explain defects clearly
- Track record of shipping security improvements that reduced real risk
- Experience with threat modeling and engaging designs before they ship
- Practical everyday use of AI in security workflows
- Working knowledge of AWS security including Lambda, IAM, and secrets handling
- Experience with CI/CD security in GitHub Actions
Stack
- Python
- Terraform
- AWS
- GitHub
- Snowflake
- SQL
- dbt
- Dagster
- Claude
- Amazon Bedrock
How you'll work
- Remote-first policy for US-based candidates
- Hybrid requirement if within 50 miles of DC, NYC, Austin, or Chicago
- In-office days are Mondays, Tuesdays, and Thursdays for local staff
- Fully remote for those outside the 50-mile radius of major offices
What you get
- Medical, dental, and vision coverage starting on Day 1
- Equity compensation via ISOs
- 401(k) retirement program
- Paid parental leave and family planning programs
- Unlimited PTO plus 10 federal holidays and Winter Break
- Physical fitness and wellness memberships
- Mental health support programs
- Learning and Development stipend