SpaceXAI

Application Security Engineer (Cybersecurity)

In short

This role secures financial applications across the software development lifecycle, covering code review, CI/CD security, threat modeling, vulnerability and bug bounty management, incident response, software supply chain security, and agentic/LLM-based security solutions. The company builds payment, wallet, and high-value transaction systems and needs protection against fraud and abuse. Candidates need 3-5 years of application security experience with Python or Rust, OWASP Top 10 knowledge, Burp Suite/ZAP experience, and a background in financial platforms. The role is onsite in the United States.

About the Role
You will secure financial applications throughout the software development lifecycle. You will review code, integrate security controls into CI/CD pipelines, model threats, manage vulnerabilities and bug bounty activities, support incident response, secure software supply chains, and develop agentic and LLM-based security solutions.
Requirements
•Bachelor's degree in Computer Science, Cybersecurity, or a related field
•3-5 years of application security experience focused on code security
•Experience with payments, money transmission, digital wallets, or related financial platforms
•Knowledge of secure coding practices, application security frameworks, and OWASP Top 10 vulnerabilities
•Proficiency in Python or Rust
•Experience securing CI/CD pipelines and implementing DevSecOps practices
•Familiarity with software supply chain security and SBOM generation tools
•Experience with Burp Suite, OWASP ZAP, and static or dynamic code analysis
•Experience securing high-value transaction systems against fraud, abuse, and integrity issues
•Experience designing and implementing agentic and LLM-based security solutions
•Communication skills for technical and non-technical audiences
Responsibilities
•Conduct code reviews and static analysis to identify and mitigate security vulnerabilities
•Design and implement secure coding guidelines and best practices
•Integrate security practices throughout CI/CD pipelines
•Perform threat modeling and risk assessments for payments, wallets, ledgers, and related products
•Develop mitigations for fraud, abuse, and unauthorized movement of funds or credits
•Manage vulnerability tracking and remediation
•Manage the bug bounty program, including triage and coordinated disclosure
•Support application-security incident response
•Evaluate and secure software supply chains and maintain SBOMs
•Design and implement agentic and LLM-based security solutions
Benefits
•Equity
•Medical coverage
•Vision coverage
•Dental coverage
•401(k) retirement plan
•Short-term disability insurance
•Long-term disability insurance
•Life insurance
•Discounts and perks

Stop applying.
Get referred.

$10 in free credits

In just 60 seconds, fully on autopilot — Eraldt's AI agents read your CV, map the roles you fit, find live vacancies and the people who can refer you, write personal emails, and get you referred.

This isn't an application: your CV doesn't go to the company, and we don't promise a referral for this exact role.

Discover who else lands interviews on autopilot