Full Stack Security Engineer – Application & Product

🔥 0 minutes ago

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Runpod

WebsiteLinkedInAll Job Openings

51 - 200 employees

Founded 2022

🤖 Artificial Intelligence

☁️ SaaS

🤝 B2B

💰 $20M Seed on 2024-06

Artificial Intelligence • SaaS • B2B

Runpod is a cloud platform that provides on-demand GPU compute and managed infrastructure tailored for AI development and deployment. It offers GPU "Pods" across 31 global regions, serverless GPU endpoints for low-latency inference, multi-node GPU clusters for distributed training, and a hub for deploying open-source models and templates. Runpod emphasizes fast startup (sub-200ms cold starts), autoscaling from zero to thousands of workers, support for 30+ GPU SKUs, and tooling for the full AI lifecycle from experiment to production, targeting developers and enterprise AI teams.

📋 Description

• Lead threat modeling, architecture reviews, and code reviews for our web applications, APIs, and microservices. • Actively develop and commit code to fix security flaws in our Python, Go, or JavaScript/TypeScript codebases alongside the engineering team. • Implement, tune, and manage security testing tools (SAST, DAST, SCA) within our CI/CD pipelines to catch vulnerabilities early in the SDLC. • Configure and manage application-layer security controls, including Web Application Firewalls (WAF), bot protection, and API gateways. • Provide security guidance, secure coding training, and standard operating procedures to development teams. • Collaborate with operations to ensure product-level adherence to relevant frameworks (e.g., SOC 2, ISO 27001, GDPR) and participate in bug bounty triage.

🎯 Requirements

• 5+ years of experience in application security, product security, or as a software engineer with a heavy security focus. • Strong programming and code-review skills in languages like Python, Go, JavaScript/TypeScript, or similar modern stacks. • Deep understanding of web application vulnerabilities (OWASP Top 10), API security (REST/GraphQL), and modern authentication flows (OAuth, OIDC, JWT). • Hands-on experience with offensive web security testing tools (e.g., Burp Suite, ZAP). • Experience building and maintaining automated security pipelines (DevSecOps). • Ability to translate complex security risks into actionable engineering tasks.

🏖️ Benefits

• Meaningful equity in a fast-growing company- everyone on the team receives stock options — your impact drives our growth, and you share in the upside. • Generous medical, dental & vision plans • Flexible PTO- take the time you need to recharge • Most roles are remote work first with an inclusive, collaborative teams utilizing slack as the main form of internal communication • $1,200 Home Office & Equipment Stipend- We set you up for success from day one with gear and support to create your ideal workspace