Lead and manage the organization’s security initiatives, focusing on secure software development lifecycle, vulnerability management, and strategic leadership.
Responsibilities
Strategically lead and manage vulnerability management and application security programs
Oversee integration of security practices within the SDLC
Plan and coordinate annual penetration testing activities
Lead and mentor a team of security professionals
Conduct IT compliance assessments and reviews
Requirements
Bachelor's or Master's degree in Computer Science, Information Security, Cybersecurity, or a related field
Nice to have: Banking or financial services sector experience
Nice to have: Cloud security architectures and services
Champion secure development, application security, and the secure adoption of AI throughout the organization, ensuring secure patterns, automation, and compliance across cloud and on-prem environments.
Responsibilities
Architect security systems and designs to help secure MX’s platform and products, including AI and LLM-powered features, both in the cloud and on-prem/colo.
Mature the MX Security Architecture review program and processes, with review criteria for both traditional applications and AI systems.
Automate application security tooling by building it into CI/CD processes, using AI-assisted analysis to triage findings, reduce false positives, and suggest fixes to developers.
Ensure that software is developed securely with resilient architectures and patterns, including guardrails for AI features that handle customer or financial data.
Partner with the Platform and DevOps teams to implement appropriate security architecture through threat models, tooling, and automation for Kubernetes, AWS/GCP, and the AI services and models running on them.
Requirements
Bachelor's degree in Computer Science, Information Security, or a related field
Nice to have: Master's degree or PhD in Computer Science, Information Security, or a related field
Nice to have: Hands-on experience securing applications that use LLMs, ML models, or AI agents
Nice to have: Knowledge of financial industry regulations such as SOC 2 and PCI
As a Senior Security Engineer, you will play a pivotal role in securing our entire technology stack - from application-level security to cloud infrastructure protection. You will lead comprehensive security initiatives across our AWS cloud environments and payment applications built with Node.js and GoLang microservices.
Responsibilities
Design and implement comprehensive security architecture for AWS cloud environments
Implement cloud security guardrails, security baselines, and configuration standards
Configure and manage AWS Shield for DDoS protection across payment processing infrastructure
Implement and optimize AWS CloudFront security configurations including WAF rules, SSL/TLS, and origin protection
Secure AWS services including EC2, ECS, EKS, Lambda, RDS, S3, and API Gateway
A highly technical role focused on conducting security reviews on applications, providing security education to engineers, and handling externally reported vulnerabilities.
Compensation
US base salary range for this full-time position is $170,000-$240,000.
Responsibilities
Serve as an application security subject matter expert who provides guidance to internal teams
Work closely with development teams, perform code reviews, penetration tests, and architectural reviews on existing codes and new features
Develop, implement, and communicate vulnerability mitigation strategies to development teams
Handle externally reported vulnerabilities as a member of Corporate Information Security Responsible Disclosure committee
Drive Fortinet static and dynamic application security testing program
Requirements
BS degree in Computer Science, Cyber Security, or equivalent experience
Application Security Engineer II applies cybersecurity and privacy principles to ensure the organization's applications and services are implemented according to internal security standards.
Senior Application Security Engineer responsible for shaping and owning the Secure Software Development Lifecycle, managing security tooling, and leading application and API security assessments across HoneyBook’s products and services.
Compensation
We offer a competitive salary and meaningful equity grants.
Responsibilities
Collaborate directly with engineering teams to define remediation strategies, orchestrate agentic workflows that apply security fixes across the application stack
Design, implement, and drive SSDLC guardrails across the company - from security design reviews and threat modeling to proactive triaging in production
Orchestrate agentic threat modeling, architecture reviews, and security assessments of cloud-based applications and services, including those leveraging emerging technologies
Manage HoneyBook’s bug bounty program, validating reports and coordinating response and resolution
Own and operate our suite of AppSec tools including SAST, ASPM, and other security scanners—triaging findings, prioritizing issues, and guiding engineering toward resolution
Join our Information Security team as an Associate DevSecOps Engineer and be part of the core team building a global enterprise-grade Application Security program from the ground up.
Compensation
The compensation range described below is the range of possible base pay compensation that the Company believes in good faith it will pay for this role at the time of this posting based on the job grade for this position. Individual compensation paid within this range will depend on many factors including geographic location, and we may ultimately pay more or less than the posted range. This range may be modified in the future.
Responsibilities
Supporting or administering Application Security Testing (AST) tools (SAST, DAST, IAST, SCA, etc.) to identify vulnerabilities and configuration issues during the software development lifecycle.
Supporting or administering tools such as Application Security Posture Management (ASPM) to centralize and deduplicate findings from multiple solutions and integrate reporting into software development workflows.
Integrating security tooling with CI/CD pipelines.
Writing custom scripts and code to automate workflows and integrate technologies.
Requirements
Bachelor's Degree
Master's Degree
Nice to have: Application Security Posture Management
Senior Manager Security AssuranceMashreq · Pakistan
Product Security ArchitectMX Technologies, Inc. · Lehi, US
Senior Cybersecurity Auditor – PlatformLyzr AI · Bengaluru, India
Application Security EngineerHoneyBook · Tel Aviv, Israel