Software Security Engineer with TS/SCI clearance to review source code, application designs, and security testing results for U.S. government projects.
Compensation
Pay range: 190,000 - $230,000 depending on experience and skill set
Responsibilities
Perform manual security reviews of source code, pull requests, and application changes to identify vulnerabilities
Assess application security against approved security baseline including NIST SP 800-53, SP 800-218, DISA STIG
Translate controls into code review checklists, acceptance criteria, and developer guidance
Responsible for remediation of security vulnerabilities across full-stack Java applications, including OWASP Top 10, SAST, SCA, DAST, and related tooling.
Locations (2)
Plano, Texas, United States
Charlotte, North Carolina, United States
Responsibilities
Own remediation of findings from SAST, SCA/FOSS, DAST, secrets, and API scans
Build systems that give defenders an advantage at a scale few engineering teams encounter, partnering with customer security teams and OpenAI’s product and research groups.
Responsibilities
Partner with customer security leaders and OpenAI’s Go-to-Market team to scope engagements, establish responsibilities, and define measurable success criteria.
Lead technical design and implementation alongside customer engineers. Integrate agents into security workflows, establish access boundaries, and determine which actions require human review.
Build evaluations grounded in the decisions defenders make. For a patching agent, test whether a fix blocks a known exploit while preserving expected application behavior. For a detection system, replay historical attacks alongside normal traffic to measure detection speed and false-positive rates.
Guide production rollout with the engineers who will operate the system. Provide the observability and controls they need to understand system behavior, intervene when necessary, and expand adoption with confidence.
Translate successful approaches across deployments into reusable tools and engineering practices that other defenders can adopt.
Build and deploy AI-powered security tools for enterprise customers, integrating with their infrastructure and workflows.
Responsibilities
Partner with customer security leaders and OpenAI’s Go-to-Market team to scope engagements, establish responsibilities, and define measurable success criteria.
Lead technical design and implementation alongside customer engineers. Integrate agents into security workflows, establish access boundaries, and determine which actions require human review.
Build evaluations grounded in the decisions defenders make. For a patching agent, test whether a fix blocks a known exploit while preserving expected application behavior. For a detection system, replay historical attacks alongside normal traffic to measure detection speed and false-positive rates.
Guide production rollout with the engineers who will operate the system. Provide the observability and controls they need to understand system behavior, intervene when necessary, and expand adoption with confidence.
Translate successful approaches across deployments into reusable tools and engineering practices that other defenders can adopt.
Requirements
Nice to have: security curiosity and experimentation
Secure applications and identity integrations for Vestwell’s fintech platform, focusing on NestJS, TypeScript, OAuth 2.0, and OpenID Connect.
Locations (4)
New York, New York, United States
Austin, Texas, United States
King of Prussia, Pennsylvania, United States
Scottsdale, Arizona, United States
Compensation
The expected base salary range for this position is $140K - $150K base. This position is eligible to participate in the Company Bonus Pool and is eligible to receive new hire equity in the Company.
Responsibilities
Analyze NestJS and TypeScript applications for security vulnerabilities