Application Security Engineer

🔥 13 hours ago

🇺🇸 United States – Remote

💵 $90k - $130k / year

⏰ Full Time

🟢 Junior

🟡 Mid-level

💻 Application Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

MyFitnessPal

WebsiteLinkedInAll Job Openings

51 - 200 employees

Founded 2005

🏥 Healthcare

🍽️ Food & Beverage

💼 Consulting

💰 $18M Series A on 2013-08

Healthcare • Food & Beverage • Consulting

MyFitnessPal is a leading nutrition and fitness tracking application designed to help users reach their health and fitness goals. It offers an all-in-one solution for tracking food intake, exercise, and calories. With over 18 million foods in its database, MyFitnessPal allows users to track calories, macros, micronutrients, and more. The app integrates with many fitness devices to sync workouts, weight, and other health metrics. MyFitnessPal's personalized nutrition insights guide users towards building sustainable healthy habits. Available in both a free and premium version, it is praised for its user-friendly interface and effectiveness in helping users achieve weight loss and fitness objectives.

📋 Description

• Own day-to-day application security vulnerability management • Triage findings from SAST, SCA, DAST, and mobile security tooling • Assign severity and due dates, propose remediations, and drive tickets through the SVM process to resolution • Operate and grow the bug bounty program, including scoping engagements, triaging researcher submissions, validating findings, and coordinating with vendors • Use AI and agentic tooling to accelerate vulnerability triage, enrichment, automated remediation support, and secure AI-assisted development • Build and maintain security automation using SOAR platforms and Python • Normalize vulnerability intake, drive notifications and SLAs, and produce program metrics and reporting • Partner with product engineering teams on remediation and participate in triage and refinement discussions • Perform security reviews of new features, services, and third-party integrations • Provide pragmatic, risk-based security guidance • Advocate secure coding practices and contribute to developer-facing security documentation and training • Administer and tune application security tooling across the SDLC • Evaluate and implement new security technology • Support identity and access management workflows and related automation

🎯 Requirements

• 2–4 years of experience in security engineering, application security, software engineering, or a closely related role • Understanding of application security assessment techniques, including SAST, DAST, SCA, and penetration testing • Knowledge of secure development practices for web and mobile applications, including OWASP Top 10 and OWASP MASVS • Experience with AI/agentic-assisted tooling, AI coding assistants, LLM-powered workflows, or agentic automation • Experience performing security triage, investigation, and vulnerability management • Familiarity with auto-scaling cloud microservices, containerization, Kubernetes, and infrastructure as code • Strong communication and cross-functional collaboration skills • Ability to create clear technical documentation for technical and non-technical audiences • Ability and desire to learn new product lines and technologies quickly and efficiently • Education and/or certifications equivalent to a BS in Computer Science or an IS-related field • GIAC, OSCP, CSSLP, Security+, or vendor-specific certifications are a plus • Experience automating security processes with Python, SOAR platforms, or workflow automation is strongly preferred • Experience with security scanning in CI/CD pipelines and orchestration tools such as GitHub Actions is a plus • Experience operating or triaging a bug bounty program is a plus

🏖️ Benefits

• Healthcare benefits, including medical, dental, and vision • Parental planning and paid maternity and paternity leave • Mental health benefits and dedicated mental health days • Annual performance bonus • 401(k) retirement plan with employer match • Responsible Time Off flexible time-off policy • 2 volunteer days off per calendar year for full-time teammates • Monthly wellness allowance • Monthly technology allowance • Opportunities for face-to-face team connections and annual company gathering • Mentorship program • Fertility-related assistance • Peer reward and recognition platform • MyFitnessPal Premium access • Virtual learning and development library • Training opportunities • Inclusive workplace and DEI initiatives