Security Engineer – Application Security

🔥 16 hours ago

🇺🇸 United States – Remote

⏰ Full Time

🟡 Mid-level

🟠 Senior

💻 Application Engineer

👻 Ghost score 20%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Quartermaster

WebsiteLinkedInAll Job Openings

1 - 10 employees

Founded 2023

📦 Logistics

🏭 Manufacturing

🎖️ Defense

Logistics • Manufacturing • Defense

Quartermaster is a company redefining maritime intelligence by providing unmatched precision and visibility in real-time to monitor the world's most remote waters. Their AI-powered SmartMast system transforms everyday vessels into a comprehensive ocean intelligence network, significantly enhancing the monitoring of maritime activities and addressing issues such as smuggling and illegal fishing. By leveraging onboard sensors and high-bandwidth satellite connectivity, Quartermaster delivers high-resolution detections and actionable insights to users, ensuring enhanced maritime awareness and decision-making.

📋 Description

• Own security for cloud services, APIs, data pipelines, and applications across distributed, edge-deployed systems • Lead threat modeling and secure design reviews • Perform secure code reviews and whitebox, greybox, and blackbox application security assessments • Build, integrate, and tune SAST, DAST, SCA, secret-scanning, CodeQL, and other CI/CD security tooling • Triage, prioritize, and drive remediation of application vulnerabilities with engineering teams • Develop automation and paved-road tooling to make secure development the default • Advise engineers and architects as the application security subject-matter expert • Define and mature the secure software development lifecycle, secure coding standards, and security requirements • Own or support vulnerability disclosure and bug bounty processes • Strengthen software supply-chain security, including dependency management, artifact and commit signing, and build/pipeline integrity • Partner with security operations on application-layer incidents • Deliver developer-focused security training and promote a security-aware engineering culture

🎯 Requirements

• 5–8 years in application security, product security, or software engineering with a strong security focus • Software development experience in one or more modern languages, including Python, Go, Java, JavaScript/TypeScript, Rust, or C/C++ • Ability to read and reason about production code • Experience evaluating code for vulnerabilities and weaknesses • Experience leading threat modeling and security design reviews • Hands-on experience with SAST, DAST, SCA, CodeQL, and CI/CD integration • Strong understanding of OWASP Top 10, CWE, common vulnerability classes, and secure coding practices • Experience securing microservices/SOA, REST/gRPC APIs, containers, and AWS, Azure, or GCP environments • Experience performing black-box and grey-box testing of web applications and APIs • Proven ability to drive vulnerability remediation with engineering teams • Excellent written and verbal communication skills • Must be a U.S. citizen • Bachelor’s degree in Computer Science, Cybersecurity, or equivalent hands-on experience • Active U.S. security clearance, or eligibility and willingness to obtain and maintain one (preferred) • Industry certifications such as OSCP, OSWE, GWAPT, GWEB, CSSLP, or Burp Suite Certified Practitioner (preferred) • Experience with secure-by-default frameworks, software supply chain security, infrastructure-as-code, Kubernetes, bug bounty programs, CVEs, embedded/edge/robotics/IoT software, NIST 800-171, CMMC, or startup/defense/intelligence/critical-infrastructure environments (preferred)

🏖️ Benefits

• Comprehensive medical, dental, and vision benefits • Flexible remote work • Significant autonomy to shape the secure SDLC, tooling, and standards • Career growth in a rapidly scaling defense-tech company • Work with cutting-edge AI and robotics systems • Mission-driven, fast-moving team