Staff Security Engineer - Application Security in United

We’re interested in engineers who have built things like security scanners, static or dynamic analysis systems, vulnerability research platforms, automated threat-modeling systems, AppSec developer tooling, security agents or other security products.

Strong software engineering ability is important. Python, Go or similar backgrounds are relevant, along with the ability to read and reason about production code across different and architectures.

n \n

• Building AI-powered security agents that can review architecture and code, identify vulnerabilities and help automate security reviews \n

• Developing the next of SAST and DAST capabilities, combining traditional security analysis with AI to find vulnerabilities that existing tooling misses \n

• Building automated systems that can move from vulnerability discovery into validation, prioritization and eventually remediation \n

• Creating security tooling that gives developers useful feedback directly inside their existing development and CI/CD workflows \n

• Automating threat modeling and secure design reviews so Product Security can scale alongside a fast-moving engineering organization \n

• Securing AI and agentic applications against emerging attack paths including prompt injection, tool abuse, excessive permissions, data leakage and unsafe agent behavior \n

• Building controls around software supply chain, dependencies and the path from source code through production \n

• Performing deep technical security research against applications, APIs and cloud- systems, then turning what is learned into repeatable tooling and engineering controls \n

\n

\n

Colossus Technologies Group is working with a high-tech fintech company to hire a Staff Security Engineer focused on building the next of its Application Security program.