Senior Application Security Engineer

📋 Description

• Collaborate with engineering to secure Webflow's web app platform.
• Apply security best practices to the software development lifecycle.
• Champion security standards while balancing business needs.
• Identify vulnerabilities via grey-box testing and propose fixes.
• Contribute code and architecture improvements for security.
• Cross-train entry-level app security engineers.

🎯 Requirements

• BA/BS degree or equivalent experience.
• 5+ years of application security, including hands-on software development, and securing high-complexity apps.
• Experience in secure software design and modern web app security; identify design flaws and drive remediation.
• Led threat modeling and/or penetration testing, or manage third-party pentests; remediation.
• Experience with security programs/tools: SCA, SAST, DAST; and/or led bug bounty programs.
• Experience building automation that leverages AI to scale security reviews, detection, and automation.

🎁 Benefits

• Equity ownership (RSUs) in a growing, privately-owned company.
• 100% employer-paid healthcare, vision, and dental insurance coverage for full-time employees and their dependents.
• 12 weeks of paid parental leave plus 6-8 weeks of pregnancy disability leave for birthing parents, where applicable.
• Flexible PTO and sabbatical program.
• Access to mental wellness, professional coaching, therapy, and Employee Assistance Program.
• Monthly stipends to support work and wellness; 401k or pension schemes and financial wellness benefits.