Senior Application Security Engineer

Job not on LinkedIn

🔥 20 minutes ago

🇺🇸 United States – Remote

💵 $135k - $180k / year

⏰ Full Time

🟠 Senior

💻 Application Engineer

👻 Ghost score 16%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Sardine

WebsiteLinkedInAll Job Openings

51 - 200 employees

Founded 2020

🔒 Cybersecurity

📋 Compliance

💳 Fintech

Cybersecurity • Compliance • Fintech

Sardine is a cutting-edge platform focused on fraud prevention and compliance. The company offers a behavior-based system for fraud detection, identity verification, and transaction monitoring that helps leading banks, online retailers, and fintechs protect themselves from scams and financial crime. Sardine's technology integrates advanced behavioral biometrics and device intelligence to combat identity fraud, payment fraud, and account takeovers. The platform also streamlines compliance checks such as KYC (Know Your Customer) and AML (Anti-Money Laundering) transaction monitoring. Sardine's comprehensive solution empowers its clients to automate risk decisioning, identify high-risk users early, and manage fraud across the customer journey effectively.

📋 Description

• Triage, validate, route, and drive remediation of findings from SAST, DAST, SCA, code review, pentests, and bug bounty • Build automation to remove manual effort from vulnerability-management workflows • Set scope for external pentests and bug bounty programs, direct testers, judge severity, and close the loop • Identify patterns across findings and remove root causes • Establish secure patterns and defaults • Write custom static analysis rules for organizational anti-patterns • Review platform-layer controls including authorization, service identity, secrets handling, and gateway enforcement • Collaborate with owning engineering teams to close security gaps • Perform hands-on application and API testing and manual code review of high-exposure services • Conduct threat modeling for new and high-exposure designs • Provide security enablement across engineering, including a security champions program

🎯 Requirements

• Experience running vulnerability management end to end, and automating it with code against scanner, ticketing, and source-control APIs • Shipped and maintained real software; able to read unfamiliar code quickly, review it rigorously, and reason about architecture and failure modes • Ownership of problems through remediation, including fixes dependent on other teams • Code auditing in at least one of Go, Python, Node.js, Ruby, or Java, with willingness to work in the rest • Practical command of the OWASP Top 10, with real depth in broken access control and business logic flaws • Experience with SAST, DAST, and SCA in CI/CD • Cloud fundamentals on GCP or AWS • Docker and Kubernetes • Ability to distinguish real findings from theoretical ones • Ability to influence asynchronously across time zones without a reporting line • Advanced offensive certifications such as OSWE, BSCP, CPTS, or CRTO are a bonus

🏖️ Benefits

• Generous compensation in cash and equity • Early exercise for all options, including pre-vested • Work from anywhere: Remote-first Culture • Flexible paid time off and Year-end break • Health insurance, dental, and vision coverage for employees and dependents - US and Canada specific • 4% matching in 401k / RRSP - US and Canada specific • MacBook Pro delivered to your door • One-time stipend to set up a home office — desk, chair, screen, etc. • Monthly meal stipend • Monthly social meet-up stipend • Annual health and wellness stipend • Annual Learning stipend