> Markdown version of [/jobs/ext/4618459-senior-application-security-engineer](https://www.wearedevelopers.com/jobs/ext/4618459-senior-application-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Senior Application Security Engineer

- **Company:** GlossGenius, Inc.
- **Location:** New York, NY, United States (Remote available)
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Data Analysis, Software System Penetration Testing, Cloud Computing, Static Program Analysis, Custom Software, Open Web Application Security, Secure Coding, Software Engineering, TCP/IP, Software Vulnerability Management, Scripting, Software Security
- **Published:** November 7, 2026
- **Apply:** https://www.juju.com/job/28_25303_93ba4d2e8289b278bda08ede05e468b3

## About the Role

* 5+ years of experience in application or product security roles, preferably in high-growth, cloud-native environments
 * Strong ability to collaborate with software development teams
 * Experience performing architecture reviews/threat models for custom software
 * Excellent communication skills, both written and verbal
 * Familiarity with common security libraries and tools (static analysis, penetration testing)
 * Understanding of common vulnerabilities and mitigation strategies (e.g., OWASP Top 10)
 * Basic development or scripting skills
 * Fundamental knowledge of network and web protocols (TCP/IP, HTTP, HTTPS)
 * Willingness to participate in on-call rotations as needed
 * Proactive project management with a focus on outcomes

## Description

Senior Application Security Engineer role at GlossGenius. GlossGenius is building an ecosystem enabling entrepreneurs to succeed, offering business management tools including booking, marketing, analytics, payment processing, and more. Over 100,000 small business owners rely on GlossGenius daily to run their operations.

This is a high-visibility role on the Foundations Engineering team. You will act as a frontline security voice for engineering and product teams, shaping the security of the entire product portfolio and ensuring security is considered from the earliest design discussions.

This role can be based remotely in the San Francisco Bay Area OR Hybrid in our NYC headquarters (Tuesdays & Thursdays in-office).

What You'll Do

 * Design Review: Act as the initial security point of contact for engineering and product teams. Conduct security-focused architectural reviews and threat modeling to identify and address vulnerabilities, working with development teams to find and fix issues.
 * Policy & Process Adjustments: Contribute to the development of security policies and standards, create secure coding guidelines, build automated tools to prevent common security issues, and embed security into CI/CD pipelines.
 * Vulnerability Management: Own end-to-end vulnerability management, deploy scanning tools across the engineering organization, triage vulnerabilities, and support ongoing tooling and process improvements.
 * Vendor Evaluation: Evaluate new security vendors, run evaluations, coordinate demos, pilot tools internally, and recommend solutions that fit needs.