> Markdown version of [/jobs/ext/3547989-application-security-engineer](https://www.wearedevelopers.com/jobs/ext/3547989-application-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Application Security Engineer

- **Company:** SPACEXAI LLC
- **Location:** United States
- **Experience:** Experienced
- **Salary:** $100,000.0 - $258,000.0
- **Contract:** Permanent contract
- **Skills:** Amazon Web Services, Burp Suite, Cloud Computing, Static Program Analysis, Code Review, Cyber Security, Continuous Integration, Python (Programming Language), Open Source Technology, Open Web Application Security, Software Maintenance, Secure Coding, Software Engineering, Spring Cloud, Large Language Models, Software Security, Information Technology, Devsecops
- **Published:** October 1, 2026
- **Apply:** https://startup.jobs/application-security-engineer-x-money-xai-10246240

## About the Role

SpaceXAI's mission is to create AI systems that can accurately understand the universe and aid humanity in its pursuit of knowledge. Our team is small, highly motivated, and focused on engineering excellence. This organization is for individuals who appreciate challenging themselves and thrive on curiosity. We operate with a flat organizational structure. All employees are expected to be hands-on and to contribute directly to the company's mission. Leadership is given to those who show initiative and consistently deliver excellence. Work ethic and strong prioritization skills are important. All employees are expected to have strong communication skills. They should be able to concisely and accurately share knowledge with their teammates., * Bachelor's degree in Computer Science, Cybersecurity, or a related field

 * 3-5 years of experience in application security, with a strong focus on code security practices
 * Experience in payments, money transmission, digital wallets, or related financial platforms
 * Deep understanding of secure coding practices, application security frameworks, and common vulnerabilities (e.g., OWASP Top 10)
 * Proficiency in Python or Rust and experience with secure coding practices in these languages
 * Experience securing CI/CD pipelines and implementing DevSecOps practices
 * Familiarity with software supply chain security and SBOM generation tools
 * Experience with security testing tools (e.g., Burp Suite, OWASP ZAP) and static/dynamic code analysis
 * Experience securing payments, wallets, ledgers, or other high-value transaction systems, including controls against fraud, abuse, and integrity issues
 * Experience designing and implementing agentic and LLM-based solutions for security problems
 * Excellent communication skills, able to explain complex security issues to both technical and non-technical audiences, * Hands-on experience securing applications on AWS; familiarity with other cloud platforms is a plus
 * Relevant security certifications (e.g., BSCP, OSCP, OSWE)
 * Experience managing bug bounty programs
 * Background in data privacy and compliance relevant to financial products and cloud-native applications
 * Experience with GitOps and infrastructure-as-code security
 * Experience building custom security tooling to enhance and automate security processes
 * Contributions to open-source security projects or tools, * To conform to U.S. Government export regulations, applicant must be a (i) U.S. citizen or national, (ii) U.S. lawful, permanent resident (aka green card holder), (iii) Refugee under 8 U.S.C. § 1157, or (iv) Asylee under 8 U.S.C. § 1158, or be eligible to obtain the required authorizations from the U.S. Department of State. Learn more about the ITAR here.

## Description

We are seeking a skilled and innovative Application Security Engineer to join 𝕏 Money. In this role, you will protect the security and integrity of our payments and financial products throughout the software development lifecycle, with a particular focus on code security, CI/CD pipelines, and systems that move and hold customer funds. Experience securing fintech, payments, digital wallet, ledger, or similar high-value platforms, where fraud, abuse, and unauthorized transfers are a constant concern, is strongly preferred., * Conduct in-depth code reviews and static analysis to identify and mitigate security vulnerabilities in financial applications

 * Design and implement secure coding guidelines and best practices for development teams
 * Collaborate closely with development teams to integrate security practices throughout the CI/CD pipeline
 * Perform threat modeling and risk assessments for payments, wallets, ledgers, and related product surfaces, and develop mitigation strategies for fraud, abuse, and unauthorized movement of funds or credits
 * Manage vulnerability tracking and remediation efforts, providing guidance to development teams
 * Manage the bug bounty program, including intake, triage, researcher communication, and coordinated disclosure
 * Support incident response activities related to application security
 * Stay current on emerging threats against financial and cloud-native systems, and continuously strengthen our controls
 * Evaluate and secure software supply chains, including producing and maintaining Software Bills of Materials (SBOMs)
 * Design and implement agentic and LLM-based solutions that help detect, investigate, or prevent security problems


## Related Videos

- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Are Code Reviews Worth It? Insights from 16 Years of Review Data](https://www.wearedevelopers.com/videos/1135-are-code-reviews-worth-it-insights-from-16-years-of-review-data)
- [How to Cause (or Prevent) a Massive Data Breach- Secure Coding and IDOR](https://www.wearedevelopers.com/videos/39-how-to-cause-or-prevent-a-massive-data-breach-secure-coding-and-idor)
- [DevSecOps: Injecting Security into Mobile CI/CD Pipelines](https://www.wearedevelopers.com/videos/273-devsecops-injecting-security-into-mobile-ci-cd-pipelines)
- [What The Hack is Web App Sec?](https://www.wearedevelopers.com/videos/1343-what-the-hack-is-web-app-sec)
- [DevSecOps culture](https://www.wearedevelopers.com/videos/783-devsecops-culture)

## Related Articles

- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers)
- [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)