> Markdown version of [/jobs/ext/2940068-senior-application-security-engineer](https://www.wearedevelopers.com/jobs/ext/2940068-senior-application-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Senior Application Security Engineer

- **Company:** Arc Full-time
- **Location:** United States (Remote available)
- **Experience:** Expert
- **Contract:** Temporary contract
- **Skills:** Code Review, Jinja (Template Engine), Python (Programming Language), Web Application Security, SQLAlchemy, Software Security, Fastapi
- **Published:** September 16, 2026
- **Apply:** https://arc.dev/signup?userType=developer&publicRandomKey=pgw83h1s8g&to=https%3A%2F%2Farc.dev%2Fdashboard%2Fd%2Fverified-jobs%2Fpgw83h1s8g%2Fapplication

## About the Role

* Extensive experience in Python web security, specifically with FastAPI, Starlette, SQLAlchemy, and Jinja2.
 * Expertise in reviewing source code to assess security posture and implementing improvements.
 * Strong ability to produce comprehensive reports detailing code review findings., * Previous experience working with synthetic data in controlled environments.
 * Familiarity with various authorization models and best practices in access control.
 * Experience with Alpine.js

## Description

We are looking for a seasoned Senior Application Security (AppSec) Engineer to specialize in code review with a strong focus on Python web security. This role is crucial in ensuring our applications are secure and follow best practices, particularly through reviewing and analyzing code in a demo environment., * Conduct thorough code reviews to identify potential security vulnerabilities.

 * Focus on web security, particularly with frameworks and libraries such as FastAPI, Starlette, SQLAlchemy, and Jinja2.
 * Analyze and review authorization and access controls, with attention to role/group permissions and row-level access.
 * Produce a detailed written report with specific file and line references to highlight findings and recommendations.
 * Work independently and directly, without subcontracting, in a demo environment using synthetic data.
 * Sign a non-disclosure agreement (NDA) as part of the engagement.