Application Security Engineer, X Money

The role

You will protect the security of X Money's payments and financial products across the software development process. Your focus will be code security, CI/CD pipelines, and systems that move and hold customer funds.

What you will do

• Conduct in-depth code reviews and static analysis to find and fix security vulnerabilities in financial applications
• Design and implement secure coding guidelines and best practices for development teams
• Work with development teams to build security into the CI/CD pipeline
• Perform threat modeling and risk assessments for payments, wallets, ledgers, and related products
• Manage vulnerability tracking and remediation, guiding development teams
• Manage the bug bounty program, including intake, triage, researcher communication, and coordinated disclosure
• Support application security incident response
• Stay current on emerging threats and strengthen our controls
• Evaluate and secure software supply chains, including producing and maintaining SBOMs
• Design and implement agentic and LLM-based solutions that help detect, investigate, or prevent security problems

Required qualifications

• Bachelor's degree in computer science, cybersecurity, or a scientific discipline
• 3+ years of experience in application security, with a focus on code security practices
• Experience in payments, money transmission, digital wallets, or other financial platforms

Nice to have

• Deep understanding of secure coding practices and common vulnerabilities (e.g., OWASP Top 10)
• Proficiency in Python or Rust with secure coding experience
• Experience securing CI/CD pipelines and implementing DevSecOps practices
• Familiarity with software supply chain security and SBOM tools
• Experience with security testing tools (e.g., Burp Suite, OWASP ZAP) and static/dynamic analysis
• Experience securing payments, wallets, ledgers, or other high-value transaction systems
• Experience designing agentic and LLM-based security solutions
• Excellent communication skills for technical and non-technical audiences
• Hands-on experience securing applications on AWS; other cloud platforms a plus
• Security certifications (e.g., BSCP, OSCP, OSWE)

Benefits

• Equity
• Comprehensive medical, vision, and dental coverage
• Access to a 401(k) retirement plan
• Short- and long-term disability insurance
• Life insurance
• Various other discounts and perks

Before you apply

• Applicant must be a U.S. citizen or national, U.S. lawful permanent resident, refugee under 8 U.S.C. § 1157, or asylee under 8 U.S.C. § 1158, or be eligible to obtain the required authorizations from

About the company

SpaceX was founded to make life multiplanetary. SpaceXSI builds Super Intelligence, including Colossus supercomputers, Grok models, and applications such as Grok Bot, Grok Build, Grok Imagine, Grok Voice, and X.