Application Security Engineer (X Money)

𝕏 Money as an Application Security Engineer, where you will protect the security and integrity of our payments and financial products throughout the software development lifecycle. You will conduct in-depth code reviews, design secure coding guidelines, collaborate with development teams, perform threat modeling, manage vulnerability tracking, and support incident response activities. The ideal candidate will have experience in securing fintech, payments, digital wallets, or similar high-value platforms, and possess a deep understanding of secure coding practices and application security frameworks.

Responsibilities

• Conduct in-depth code reviews and static analysis to identify and mitigate security vulnerabilities in financial applications.
• Collaborate closely with development teams to integrate security practices throughout the CI/CD pipeline and perform threat modeling and risk assessments.
• Manage vulnerability tracking and remediation efforts, providing guidance to development teams, and manage the bug bounty program.

Requirements

• Experience designing and implementing agentic and LLM-based solutions for security problems
• Deep understanding of secure coding practices, application security frameworks, and common vulnerabilities (e.g., OWASP Top 10)
• Bachelor's degree in Computer Science, Cybersecurity, or a related field
• Experience securing CI/CD pipelines and implementing DevSecOps practices
• Excellent communication skills, able to explain complex security issues to both technical and non-technical audiences
• Experience securing payments, wallets, ledgers, or other high-value transaction systems, including controls against fraud, abuse, and integrity issues
• Proficiency in Python or Rust and experience with secure coding practices in these languages
• 3-5 years of experience in application security, with a strong focus on code security practices
• To conform to U.S. Government export regulations, applicant must be a (i) U.S. citizen or national, (ii) U.S. lawful, permanent resident (aka green card holder), (iii) Refugee under 8 U.S.C. § 1157, or (iv) Asylee under 8 U.S.C. § 1158, or be eligible to obtain the required authorizations from the U.S. Department of State

Preferred

• Familiarity with software supply chain security and SBOM generation tools
• Experience with security testing tools (e.g., Burp Suite, OWASP ZAP) and static/dynamic code analysis
• Experience in payments, money transmission, digital wallets, or related financial platforms
• Experience managing bug bounty programs
• Contributions to open-source security projects or tools

Experience with GitOps and infrastructure-as-code security

• Background in data privacy and compliance relevant to financial products and cloud-native applications
• Experience building custom security tooling to enhance and automate security processes
• Relevant security certifications (e.g., BSCP, OSCP, OSWE)
• Hands-on experience securing applications on AWS; familiarity with other cloud platforms is a plus

Pay

USD 100,000 - 258,000