Senior Application Security Engineer

🕒 July 23

🏄 California – Remote

🏄 California – Remote

💵 $130k - $190k / year

⏰ Full Time

🟠 Senior

💻 Application Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Mitek Systems

WebsiteLinkedInAll Job Openings

201 - 500 employees

Founded 1986

🤖 Artificial Intelligence

📋 Compliance

🔐 Security

Artificial Intelligence • Compliance • Security

Mitek Systems is a leading provider of identity verification and biometric authentication solutions, serving a wide array of industries. It specializes in technologies such as mobile capture, biometric authentication, and fraud detection, offering AI-driven solutions to enhance compliance, security, and customer onboarding processes. Mitek Systems is renowned for its pioneering Mobile Deposit technology and its 4-dimensional biometric authentication, which includes face and voice liveness detection. The company focuses on protecting against financial fraud and ensuring compliance with regulatory standards, helping businesses to build customer trust through secure and seamless user experiences.

📋 Description

• Own the application vulnerability remediation program with prioritized developer guidance and clear SLAs • Work with development squads to explain findings, validate fixes, and confirm remediation • Drive systemic root-cause fixes rather than one-by-one patching; escalate unresolved criticals and highs • Define and own the SDLC — security gates and review checkpoints in sprint and release processes • Ensure SAST, DAST, and SCA tooling is configured, tuned, and producing actionable developer output • Embed security requirements into product planning and architecture decisions • Threat-model new features and architectural changes before code is written • Review designs for authentication, authorization, data-flow, and cryptographic risk • Produce written threat models that serve as developer guidance and audit evidence • Own API security standards — OAuth 2.0, mTLS, rate limiting, and abuse prevention • Conduct or coordinate manual secure code review of security-sensitive components • Lead application penetration-testing cycles — scoping, managing testers, validating findings • Build and run a Security Champions program across development squads • Deliver developer security training on OWASP Top 10 and secure-coding patterns • Create runbooks, coding standards, and pattern libraries developers can apply independently

🎯 Requirements

• Knowledge, skills and abilities typically gained through 5–8 years in application/product security or security-focused software engineering • Application penetration testing including business-logic and API testing • Hands-on SAST, DAST, and SCA tuning and operationalization • Secure code review across at least two web-application languages • Threat modeling using STRIDE, PASTA, or equivalent • Depth in OWASP Top 10 and API security risks; ability to influence development teams

🏖️ Benefits

• Wellness: Universal, supplemental, and private healthcare plan choices based on country specifics • Financial future: retirement/pension plan contributions, MTK stock plan participation • Income protection: life event & disability coverage • Paid time off: generous annual leave, company holidays, volunteer time off • Learning: e-learning license, tuition reimbursement, hackathons • Home office setup allowance • Additional/optional benefits: pet insurance, identity theft protection, legal assistance