Application Security Engineer

The role

An Application Security Engineer will secure products and platforms for Fortune 500 customers. You will partner with engineering teams to review code, architecture, and design while providing manual pentesting and building security tooling.

What you will do

• Review code, architecture, and design for release
• Guide features and designs toward security
• Provide hands-on manual pentesting on relevant code changes
• Build and maintain security tooling
• Advise the DevOps team on infrastructure security best practices
• Help with client-facing security needs such as client calls

Required qualifications

• Proven experience securing products and platforms
• Collaborating with development teams
• Strong expertise in application security: OWASP Top 10, threat modeling, code reviews, architecture design
• Proficiency with AI tooling
• Solid understanding of AI itself, including AI threats, adversarial testing
• Familiarity with AWS and infrastructure security overall
• Comfortable writing and reviewing Python and TypeScript
• Experience with incident response and SOC processes
• Knowledge of compliance frameworks: SOC 2, ISO 27001, NIST
• Experience with enterprise security processes, such as security questionnaires and client calls
• Valid travel documents without work authorization restrictions in the US
• Availability during Eastern Time working hours

Nice to have

• other coding experience

Benefits

• Competitive salary including base + bonuses
• Comprehensive health coverage (medical, dental, vision) from day one
• Generous PTO
• Company-wide R&R shutdowns
• Paid parental leave
• Retirement plan support for US and global employees
• A WFH stipend
• Phone stipend
• Support to work in a We Work or other space as preferred
• Meaningful ownership in a venture-backed company
• Top-up grants

Before you apply

• Must be generally available during Eastern Time working hours
• Must have valid travel documents without work authorization restrictions in the US
• Employment is contingent upon successful completion of employment history, education, and other information verification checks
• Employees may not hold concurrent full-time employment with another organization
• Outside consulting, advisory, freelance, or other professional work must be disclosed and approved in advance

About the company

Valence is an AI-first leadership coaching platform for large enterprises. The company uses machine learning and natural language processing to transform how the world's biggest companies approach learning and development.