Senior Application Security Engineer

November 21

🏄 California – Remote

Although this job is listed in California, this company may be open to hiring remote in other states.

⚓ Rhode Island – Remote

Although this job is listed in Rhode Island, this company may be open to hiring remote in other states.

💵 $220k - $350k / year

⏰ Full Time

🟠 Senior

💻 Application Engineer

Apply Now

Receive Emails with Similar Jobs

Quanata

WebsiteLinkedInAll Job Openings

Artificial Intelligence • Insurance • SaaS

Quanata is a company that empowers the insurers of tomorrow with AI-assisted modeling capabilities, real-time telematics solutions, and risk-based acquisition innovations, focusing on context-based insurance solutions. They provide advanced contextual and behavioral risk modeling, digital experiences, and telematics-driven rewards programs. Quanata is backed by industry leader State Farm and utilizes Silicon Valley talent and technology to drive innovation in the insurance sector. Their platform offers cloud-native technology solutions for insurers, including telematics-focused consumer-facing apps. Based in San Francisco, CA, Quanata aims to modernize claims processes and enhance underwriting and marketing capabilities for market-leading insurers and innovative insurtechs.

201 - 500 employees

🤖 Artificial Intelligence

☁️ SaaS

📋 Description

• Partner with one product portfolio to facilitate overall product security management, emphasis on AI/ML-specific security concerns and cross-functional work with data science teams • Perform security design reviews and threat modeling on APIs, web features, and service integrations, including integrating SAST, SCA, and DAST tools into CI/CD pipelines • Support secure development practices across security champions and engineering • Review source code and deployment configurations for security vulnerabilities • Collaborate with developers to triage, fix, and validate vulnerability findings • Participate in cross-functional incident response and remediation planning • Draft and maintain AppSec guidance for engineering teams and security champions • Contribute to security awareness and enablement across the engineering org • Develop AppSec related integrations and deployments of automation solutions (ASVS scanning, burpsuite enterprise) • Support application security integration reviews, saas security assessments, oss reviews

🎯 Requirements

• Bachelor’s degree or equivalent relevant experience and; • 6 - 8 years of experience in application security or full-stack development with security expertise • Strong understanding of secure coding in JavaScript/TypeScript, Node.js, and web standards • Familiar with application risk and vulnerabilities (OWASP Top 10, API Security, SSRF, etc.) • Experience with code scanning tools (e.g., CodeQL, Semgrep, SonarQube, Snyk) • Comfortable reading and debugging complex codebases across the stack • Clear and thoughtful communicator with the ability to guide engineers at all levels.

🏖️ Benefits

• We provide a wide variety of health, wellness and other benefits. These include medical, dental, vision, life insurance and supplemental income plans for you and your dependents, a Headspace app subscription, monthly wellness allowance and a 401(k) Plan with a company match. • Given our virtual environment— in order to set you up for success at home, a one-time payment of $2K will be provided to cover the purchase of in-home office equipment and furniture at your discretion. Also, our teams work with MacBook Pros, which we will deliver to you fully provisioned prior to your first day. • All employees accrue four weeks of PTO in their first year of employment. New parents receive twelve weeks of fully paid parental leave which may be taken within one year after the birth and/or adoption of a child. The twelve weeks is applicable to both birthing and non-birthing parent. • We’re committed to investing in and helping our people grow personally and professionally. All employees receive up to $5000 each year for professional learning, continuing education and career development. All team members also receive LinkedIn Learning subscriptions and access to multiple different coaching opportunities through BetterUp.