Application Security Engineer

The role

You will bring security depth to product engineering teams by owning the security judgment layer. You will work on integrating security tooling, tuning outputs, and designing actionable findings. You will also partner with product, design, and customers to iterate on the platform.

What you will do

• Own the integration, configuration, and output quality of security tooling
• Tune outputs to maximize signal and minimize noise
• Design rules, severity scoring, and triage flows
• Build the security judgment layer on top of underlying tooling
• Partner with engineers on how findings are presented in the UI and remediation flows
• Work with PM and design on roadmap priorities
• Review and shape architectural choices that affect security outcomes
• Engage with customers directly to understand platform usage
• Benchmark output quality against competitors
• Contribute back to open source security tooling

Required qualifications

• 5+ years of application security experience
• Significant time shipping security products
• Strong programming skills in at least one of Go, Python, or TypeScript
• Hands-on experience tuning security tooling for production use
• Understanding of vulnerability research, CVE/CWE taxonomies, and exploit reasoning
• Experience making security findings actionable
• Excellent communication skills
• Comfort working directly with customers
• Pragmatic approach to building
• Experience in a fast-moving, start-up engineering environment

Nice to have

• Prior experience shipping a security product at a vendor
• Contributions to open source security tooling
• Offensive security background or OSCP / similar certifications
• Hands-on experience with LLM agents, tool use, or autonomous AI systems

Benefits

• Comprehensive health & wellness benefits
• 20 days PTO per year
• 8 floating holidays
• Remote work culture
• Team off-sites in stunning places (Amsterdam, Italy, etc)
• Competitive compensation & equity

Before you apply

• Oneleet participates in E-Verify for U.S.-based candidates to confirm employment eligibility
• The company uses automated technology, including AI-assisted tools, to assist in reviewing applications

About the company

Oneleet is building an all-in-one security and compliance platform. Their mission is to make effective cybersecurity painless.