Staff/Principal Application Security Engineer
Binti · Remote · Remote ·
COMPENSATION
$240k – $330k
Listed on the employer's job board (Ashby)
- Fully remote (US)
- Staff/Principal level
- Ruby, Python, Java
- No visa sponsorship
- Social impact mission
As the first Principal Security Engineer focused on applications, you will report to the CTO and define the company's security posture. You will collaborate with full-stack engineers to integrate secure coding standards, automate security controls, and protect sensitive data for government agencies.
What you'll do
- Conduct regular security reviews, code audits, penetration testing, and threat modeling
- Define pragmatic security strategies and prioritize investments based on risk
- Respond to security incidents and perform post-event analyses
- Design and implement security automation within the SDLC and cloud environments
- Establish secure coding standards and best practices for development teams
- Mentor engineers and foster a scalable, security-aware culture
- Support compliance efforts for SOC 2 Type II and HIPAA frameworks
- Manage bug bounty programs and engage with external security researchers
What you'll need
- Proven experience as an Application Security Engineer or in a similar role
- Strong background in full-stack development, cloud computing, and scalable architecture
- Proficiency in one or more OOP languages such as Ruby, Python, or Java
- Deep knowledge of web application security principles and common vulnerabilities
- Ability to communicate complex security concepts to non-technical stakeholders
- Experience cultivating security-aware cultures through mentorship and automation
- Must be authorized to work in the US without sponsorship
Nice to have
- Prior experience with GovTech or FedRAMP compliance
- Passion for leveraging technology to address social challenges
Stack
- Ruby
- Python
- Java
- AWS
- SIEM platforms
How you'll work
- Fully remote position
- Candidates must be authorized to work in the US
- No visa sponsorship available
What you get
- Above-market compensation package including salary and equity
- 99% of insurance premiums covered for employees and dependents
- Flexible vacation time and 13 paid holidays
- 16 weeks of paid parental bonding leave
- 4 weeks of sabbatical after 4 years of service
- $2,500 annual reimbursement for learning and development
- $50 monthly effective work reimbursement
- $5,000 annual bonus for CASA volunteers
Hiring process
- Background and reference checks for final candidates
- Verification of employment, education, and criminal history