Build and improve the AI-powered, agentic system at the heart of MDASH vulnerability discovery, validation, and resolution, combining deep vulnerability research with AI experimentation.
Compensation
The typical base pay range for this role across the U.S. is USD $119,800 - $234,700 per year. There is a different range applicable to specific work locations, within the San Francisco Bay area and New York City metropolitan area, and the base pay range for this role in those locations is USD $160,200 - $261,000 per year.
Responsibilities
Conduct hands-on vulnerability research across vulnerability classes, languages, frameworks, and codebase architectures to discover and validate vulnerabilities, assess reachability and exploitability, evaluate fixes for security correctness, and identify opportunities to expand MDASH coverage.
Translate research and evaluation insights into implemented improvements to MDASH agents, tools, model configurations, and analysis methods, and measure their impact.
Identify representative evaluation targets and author trusted ground truth spanning vulnerability evidence, attack paths, severity, validation, and remediation.
Drive MDASH's eval-driven development and hill-climbing loop by running evaluations, uncovering patterns in missed and incorrect results, and creating adversarial and regression cases that turn blind spots into measurable capability gains.
Build research prototypes, fuzzing harnesses, datasets, graders, and automation that accelerate capability improvement.
Requirements
Bachelor's Degree in Computer Science, Computer Security, Computer Engineering, or a related field
Master's Degree in Computer Science, Computer Security, Computer Engineering, or a related field
Doctorate Degree in Computer Science, Computer Security, Computer Engineering, or a related field
Lead mobile and product security for a consumer membership ecosystem, owning mobile security, application security, pen testing, and security architecture.
Compensation
$205,000 –$256,000 + 15% bonus + equity
Responsibilities
Embed directly with mobile and product squads to threat‑model, review, and harden features before they ship
Own the mobile application security program end‑to‑end, including secure SDLC, code review, and developer‑facing tooling
Own the broader product application security program, including secure‑by‑default patterns and API/backend security review
Run the pen testing program across mobile and web/API, coordinating external engagements
Architect security controls and documentation to meet partner security requirements
Design, build, and evolve the MDASH scanning engine, integrating AI agents and models to analyze codebases, detect vulnerabilities, and generate fixes.
Locations (3)
Redmond, Washington, United States
San Francisco, California, United States
New York, New York, United States
Compensation
Software Engineering IC5 - The typical base pay range for this role across the U.S. is USD $142,800 - $274,800 per year. There is a different range applicable to specific work locations, within the San Francisco Bay area and New York City metropolitan area, and the base pay range for this role in those locations is USD $188,000 - $304,200 per year.
Responsibilities
Design, build, and evolve the MDASH scanning engine, including agent orchestration, multi-model routing, code understanding, vulnerability detection, reachability validation, and fix generation and verification.
Senior Engineer, Application Security
f7d8749a-72d6-407c-bf98-292ea630c73a · Posted Oct 26, 2026
Senior Engineer, Application Security for the Hivemind Enterprise product, responsible for defining security policies, deploying scanning tools, and collaborating with developers and architecture teams to secure the software.
Compensation
Pay within range listed + Bonus + Benefits + Equity
Responsibilities
Define application security policies
Deploy and configure scanning tools within CI/CD pipelines
Review scanning results and work with developers to fix security issues
Help design secure-by-default software product
Perform threat modeling and validate designs
Requirements
Bachelor’s degree in cybersecurity, software engineering, or a closely related technical field
Master’s degree in cybersecurity, software engineering, or a closely related technical field
Nice to have: Previous experience on an application security team for a large, complex software product
Nice to have: Experience as a DevSecOps engineer, especially in a GitLab environment
Nice to have: Experience writing software or testing Python, C/C++, and/or Go
Designs and implements security controls to protect the organization's applications, APIs, and computer networks from cyber attacks.
Compensation
The pay range for this position is Ft22,359,600.00 - Ft38,011,300.00 annually. Typically, a competitive wage for new hires will fall between24,000,000.00 to36,000,000.00 annually. Offers for this position may vary based on market data and other factors such as job-related knowledge, skills, experience, and geographic location. The position may also be eligible for a short-term incentive.
Responsibilities
Oversees the implementation, monitoring, evaluation, and maintenance of application and IT security systems, policies, and procedures to safeguard the confidentiality, integrity, and availability of the organization's information, systems, and processes.
Embeds security into the software development lifecycle, defining requirements for secure design, threat modeling, code review, dependency and supply chain management, and pre-release security validation.
Determines and establishes methodologies for conducting application security testing, vulnerability assessments, and compliance audits, including static analysis, dynamic analysis, software composition analysis, and manual review.
Leads the evaluation and testing of applications, APIs, third-party integrations, hardware, firmware, and software for possible impact on system security.
Partners with development and platform teams to triage, prioritize, and drive remediation of application vulnerabilities, establishing severity criteria and remediation timelines.
Lead product security for Vecima’s software and hardware platforms, driving threat modelling, secure design, and vulnerability management across embedded Linux and cloud‑connected products.
Locations (2)
United States
Canada
Responsibilities
Identify and reduce security risk throughout the product lifecycle
Lead threat modelling for new products and architecture changes
Translate security risks into engineering requirements
Coach developers and architects in secure design and coding
Improve secure product development through risk‑based activities and automated CI/CD checks
Extend the engine's coverage across vulnerability classes, programming languages, frameworks, build systems, and codebase sizes, from single services to large monorepos.
Integrate program analysis techniques into agent workflows to make detections more precise and grounded.
Improve the engine's precision, recall, consistency, and fix quality, working from evaluation results, research findings, and production feedback.
Optimize scan performance, scalability, cost, and latency so MDASH works well on enterprise-scale codebases and in CI/CD workflows.
Requirements
Bachelor's Degree in Computer Science or related technical field
Master's Degree in Computer Science or related technical field
Nice to have: Master's Degree in Computer Science or related technical field
Nice to have: 8+ years technical engineering experience
Nice to have: 12+ years technical engineering experience
Staff Mobile & Product Security EngineerMrBeast · San Mateo, US
Senior Engineer, Application Securityf7d8749a-72d6-407c-bf98-292ea630c73a · San Diego, US
Senior Security Software Engineer/DeveloperVecima Networks Inc. · Remote, US+1 more