Virtru

Application Security Engineer

Rol remoto de Application Security Engineer con fit claro de ubicación del candidato.

Publicado5 jul 2026

Países elegibles1 país aceptado

Señal de senioritySenior

Modelo de trabajoRemoto

Ubicaciones aceptadas para candidatos

Estados Unidos

Puedo aplicar realmente?Revisa la lista de países

Las ubicaciones aceptadas para candidatos están listadas (1).

Actualidad de la fuente5 jul 2026

Fit de ubicación1 país aceptado

Match de stackAWS, GCP

Camino de aplicaciónSitio de la empresa

Resumen de fit de MiraPor qué vale revisar este rol

Fit de ubicación1 país aceptadoAgrega tu país

Match de stackAgrega skills al perfil para compararAWS, GCP

Señal de senioritySeniorDefine tu nivel para una revisión más precisa.

Preparación para aplicarSitio de la empresaLa aplicación continúa en el sitio de la empresa.

Aplicación

Aplicar en el sitio de la empresa

Aplicación externa

Aplicando aApplication Security EngineerVirtru

Fit de país1 país aceptado

Camino de aplicaciónSitio de la empresa

WithMiraGuarda o suscríbete antes de salir

Aplicación de la empresa

WithMira mantiene este rol para descubrimiento. La aplicación continúa en el sitio de la empresa.

Resumen del rol

Contenido del rol extraído en secciones para revisar más rápido.

Security Engineering
Collaborate with development teams, Site Reliability Engineering, and other stakeholders to strengthen the adoption of security best practices throughout the SDLC.
Independently identify security improvements and implement them.
Vulnerability Management:
Implement, manage, and automate vulnerability management processes.
Prioritize and remediate vulnerabilities discovered through internal scans, penetration tests, and bug bounties.
Security Assessments
Conduct threat modeling, code audits, design reviews with engineers to ensure effective and secure development.
Collaborate in providing actionable recommendations to find workable solutions.
Threat Hunting:
Establish a threat hunting capability and automate where appropriate.
Enhance logging capabilities related to security events.
Security Tools Integration and Management:
Integrate and manage dynamic and static code analysis tools.
Ensure operation of security tools within the development pipeline.

Collaborate with development teams, Site Reliability Engineering, and other stakeholders to strengthen the adoption of security best practices throughout the SDLC.
Independently identify security improvements and implement them.
Implement, manage, and automate vulnerability management processes.
Prioritize and remediate vulnerabilities discovered through internal scans, penetration tests, and bug bounties.
Conduct threat modeling, code audits, design reviews with engineers to ensure effective and secure development.
Collaborate in providing actionable recommendations to find workable solutions.
Establish a threat hunting capability and automate where appropriate.
Enhance logging capabilities related to security events.
Integrate and manage dynamic and static code analysis tools.
Ensure operation of security tools within the development pipeline.

4+ years experience in secure development or application security.
Deep knowledge of security concepts such as authentication, web architecture, etc.
Experience with Nodejs, Go, etc.
Experience running bug-bounty, penetration testing, vulnerability scanning programs.
Experience setting up and maintaining SAST, DAST, IAST and SCA tooling
Experience using assessment tools such as Burp, ZAP, Qualys, Nessus, etc.
Experience building and maintaining WAF solutions.
Familiarity with industry security practices, standards, and regulations such as FedRAMP, SOC2, HIPAA, etc. a plus.
Familiarity with GCP/AWS and Kubernetes infrastructure security a plus.
Self-motivated and goal driven, able to find what needs to be done and do it.

Thinking outside of the box to respectfully challenge your teammates and managers in the pursuit of excellence
Strong sense of urgency with an action-oriented mindset
Able to collaborate and adapt to shifting priorities as business needs evolve
Comfortable with asynchronous communication including slack, email, zoom, etc.

A Flexible PTO policy — we strongly encourage you to take time off (in addition to 14 holidays) to ensure that you are getting the proper time needed to unplug and recharge.
A $1,500 annual Learning & Development Stipend focused on providing you the resources to continually learn and professionally grow.
Frequent company-sponsored team celebrations that provide ample opportunities to connect with teammates and be social!
Access to an Employee Assistance Program
Access to Headspace, a mental health app tailored to your specific needs.
A flat 3% contribution to your retirement account
A high degree of flexibility — Have an appointment, errand, or family emergency to take care of? Hop to it! We give you the time and space to take care of you and your own first.
In addition to wellbeing, Virtru places a strong emphasis on diversity, equity, inclusion, and belonging. Our DB&I Council is dedicated to fostering an inclusive workplace and making the psychological safety of each and every one of our teammates a top priority.