Senior Application Security Engineer

📋 Description

• Create and maintain Alma's application security strategy and six-quarter OKRs.
• Lead the application security domain, tooling, and security strategy.
• Develop security measures to protect Alma’s data, apps, and systems.
• Collaborate with Platform Infra and Developer Experience to deploy tooling.
• Research current and emerging threats; propose impactful guidance.
• Build security training and documentation for engineers.

🎯 Requirements

• 4+ years in an application security role.
• Strong SDLC security practices.
• Deep CSP knowledge and implementation.
• Experience with AI security and securing AI systems.
• Expert with SAST/DAST tools (StackHawk, Snyk) and OWASP ZAP/Burp Suite.
• Familiarity with OWASP Top 10 and common web app attacks.

🎁 Benefits

• Remote-first company.
• Health, dental, and vision insurance with wellness stipends.
• 401K plan.
• Monthly therapy and wellness stipends.
• Monthly work-from-home stipend.
• Flexible PTO and paid holidays.