> Markdown version of [/jobs/ext/247156-senior-application-security-engineer](https://www.wearedevelopers.com/jobs/ext/247156-senior-application-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Senior Application Security Engineer - **Company:** Gemini Trust Company, LLC. - **Location:** New York, NY, United States (Remote available) - **Experience:** Expert - **Salary:** $140,000.0 - $200,000.0 - **Contract:** Permanent contract - **Skills:** JavaScript (Programming Language), Artificial Intelligence, Algorithmic Trading, Software System Penetration Testing, C++ (Programming Language), Cloud Computing, Code Review, Continuous Integration, Python (Programming Language), Open Web Application Security, Scala (Programming Language), Secure Coding, Scripting, Software Security, Build Management, Software Coding, Static Application Security Testing, Microservices, Dynamic Application Security Testing - **Published:** May 19, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=1b53689d95e9e03c ## About the Role Do you have experience in Software coding?, * 5+ years of experience in application security or similar roles * Ability to perform design reviews, threat modeling, secure code reviews, or penetration testing with an attacker mindset * Experience building or meaningfully contributing to security tooling and automation * Strong background in application security best practices and familiarity with common vulnerabilities (e.g. SSRF, race conditions, privilege escalations, etc.) * Some background in development or scripting experience (Python, Scala, C++, or JavaScript) with the ability to read and write code * Strong communication skills to influence without authority and the ability to collaborate on a cross-functional team with competing priorities Preferred Qualifications: * Experience building AI application security tooling using agents or skills * Experience with supply chain security, common frameworks (SLSA, OWASP SPVS) and other CI/CD security controls * Familiarity with highly regulated environments (financial services, fintech, crypto, or equivalent) and ability to understand business objectives, business context, and security risk * Experience with preventing application security vulnerabilities at scale through secure design patterns, automated tooling, or frameworks * Experience with microservice architectures and cloud-native environments ## Description * Lead secure design reviews, threat modeling, code review, and penetration testing for high-risk products such as crypto custody, trading systems, and payments * Build and ship code: design and build AppSec tooling including AI agents for secure design and code review, AI-enhanced SAST/DAST pipelines, and automation that eliminates repeatable security toil * Partner with engineering teams to remediate vulnerabilities and drive long-term improvements in secure coding practices ## Related Videos - [JavaScript? No. Java Scripts! - Scripting with Java](https://www.wearedevelopers.com/videos/2094-javascript-no-java-scripts-scripting-with-java) - [Are Code Reviews Worth It? Insights from 16 Years of Review Data](https://www.wearedevelopers.com/videos/1135-are-code-reviews-worth-it-insights-from-16-years-of-review-data) - [Microservices: how to get started with Spring Boot and Kubernetes](https://www.wearedevelopers.com/videos/242-microservices-how-to-get-started-with-spring-boot-and-kubernetes) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Intermediate Bitcoin Script](https://www.wearedevelopers.com/videos/25-intermediate-bitcoin-script) - [Real-World Security for Busy Developers](https://www.wearedevelopers.com/videos/1545-real-world-security-for-busy-developers) ## Related Articles - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [Dev Digest 138 - Are you secure about this?](https://www.wearedevelopers.com/magazine/486-dev-digest-138-are-you-secure-about-this) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Dev Digest 120 - Apple and peers](https://www.wearedevelopers.com/magazine/455-dev-digest-120-apple-and-peers) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)