Staff Application Security Engineer

Job not on LinkedIn

🔥 2 minutes ago

🇺🇸 United States – Remote

💵 $240k - $300k / year

⏰ Full Time

🔴 Lead

💻 Application Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 0%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Brex

WebsiteLinkedInAll Job Openings

501 - 1000 employees

Founded 2017

💼 Consulting

📦 Logistics

✈️ Travel

💰 Series D on 2022-05

Consulting • Logistics • Travel

Brex is a financial technology company that offers modern solutions for managing expenses, banking, and finances in over 120 countries. Unlike traditional banks, Brex provides a platform with services such as corporate cards, AI-powered expense management, travel booking, bill payment, and banking and treasury services. It aims to help startups and larger enterprises control spending, automate busywork, and maximize financial resources through its innovative financial stack. With a focus on AI and automation, Brex enables companies to save time, ensure compliance, and enhance efficiency in financial operations. It provides financial products like business accounts yielding 4. 22%, and solutions tailored to various business sizes, helping finance teams maximize impact and adapt to growth stages.

📋 Description

• Lead the technical vision and strategic roadmap for the Application Security team, aligning security objectives with Brex's enterprise growth and high-velocity engineering metrics • Establish technical standards and secure defaults across the entire engineering organization, fostering a culture of collaborative security excellence and bridging product platforms, infra, and trust • Architect and secure novel AI/ML and agentic workflows, applying cutting-edge practices to mitigate risks such as prompt injection, model manipulation, and data poisoning • Mentor and coach engineers within the team and across the broader organization, guiding technical growth, helping individuals level up their security expertise, and accelerating team delivery • Drive proactive vulnerability discovery and offensive security testing strategies, executing complex attack chains to demonstrate business impact and prioritize cross-functional remediation • Partner with Product Platform, Cloud Infrastructure, and Data engineering teams to ensure core primitives, APIs, and microservices are secure by default from design to deployment

🎯 Requirements

• 8+ years of experience in Application Security, Product Security, or software engineering with a primary focus on offensive and defensive application security • Proven track record of technical leadership and team mentorship on complex, multi-quarter security engineering initiatives in a fast-paced environment • Deep proficiency and technical expertise in AI security, including hands-on experience securing agentic architectures, LLM gateways, and evaluating adversarial AI vectors • Strong systems-thinking capabilities with extensive experience defining secure product development lifecycles, threat modeling complex topologies, and cloud-native container security (AWS, Kubernetes) • Proficiency in Python, Go, or similar languages to architect internal tooling, pipeline automation, and advanced detection/scanning engines • Exceptional written and verbal communication skills, with a demonstrated ability to navigate ambiguity, influence technical leaders, and manage up and out across EPD organizations • Experience with Kotlin, gRPC, GraphQL, Kubernetes • Previous experience in building and scaling security teams • Experience with securing distributed systems in AWS and cloud environments • Contributions to the wider technical community — open source, public research, CTF participation, blogging, CVEs, or presentations • Experience submitting to bug bounty or responsible disclosure programs • Published AI security research or contributions to AI security frameworks

🏖️ Benefits

• Equity and other forms of compensation may be provided as part of a total compensation package • Tools, resources, and support to grow your career • Diverse and inclusive culture

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume