Application Security Engineers

• Validate AIgenerated vulnerability findings (e.g., from Anthropic s Mythos) and assess exploitability, severity, and business impact.
• Trace vulnerabilities to their technical root cause at the code level.
• Collaborate with development teams to design and implement secure remediation strategies.
• Conduct secure code reviews, threat modeling, and vulnerability assessments.
• Define and enforce secure SDLC practices across product teams.
• Provide guidance on API security, OWASP Top 10 risks, and secure design principles.
• Partner with product owners and engineering teams to ensure vulnerabilities are remediated effectively and deployed safely.
• Document findings, remediation steps, and best practices to strengthen organizational security posture.

• Strong background in Application Security / Product Security.
• Handson experience with OWASP Top 10, SAST, vulnerability assessment, secure SDLC, threat modeling, code review, API security.
• Ability to validate findings, assess severity, and trace vulnerabilities to root cause.
• Experience working directly with developers to remediate vulnerabilities.
• Strong communication skills to bridge security and engineering teams., * A software engineer turned AppSec professional someone who understands both the security problem and how developers actually fix it.
• Proven ability to work across multiple product teams, enabling secure development practices.
• Experience with modern CI/CD pipelines and integrating security tooling into developer workflows.

CONTRACTOR, FULL_TIME, PART_TIME