Apollo ioHiring

Senior Application Security Engineer

  • Remote, United States
  • Senior
  • Posted 2 weeks ago
Apply with Keywordise AI

or apply from Claude / ChatGPT / Muse

In one line

Senior individual contributor securing a SaaS product and its AI features, from design review to hands-on fixing; remote-friendly.

About the role

Secure software development lifecycle work sits at the centre: threat modeling, code-level review and pushing findings through to real fixes. The role is calibrated at senior IC level, owning annual goals and cross-team influence.

At a glance

Pay
Not stated in the posting
Remote scope
Remote, United States
Seniority
Senior
Skills
Threat modeling, OAuth, CSRF, SSRF, SCA, Penetration testing
Posted
16 Oct 2026
Last checked
3 Nov 2026

What you will do

  • Own and improve the secure software development lifecycle so security is built into design, build and deploy
  • Run application security reviews, threat modeling and code-level analysis on high-impact product, platform and AI features
  • Drive vulnerability management from bug bounty, pentests and SCA findings through to verified fixes
  • Read code, explain root cause and implement or support fixes for complex vulnerabilities
  • Do hands-on validation and offensive testing to confirm a fix addresses the underlying issue

What they look for

  • Deep application security experience across modern SaaS, including auth, access control, OAuth and CSRF flaws
  • Familiarity with SSRF, crypto and verification issues, data exposure, unsafe deserialization and dependency risks
  • Ability to make risk-based severity calls using exploitability and data sensitivity
  • Track record of influencing engineering and product teams without direct authority

Nice to have

  • Experience with red-team style exercises and exploit development

How Keywordise applies for you

  1. 1Upload your CVAdd your CV once. It takes about a minute.
  2. 2Tailored to this jobKeywordise writes a CV and a cover letter for this job from your real experience.
  3. 3The form fills itselfName, email, experience and screening questions, field by field.
  4. 4Application sentYou get a receipt and follow it in your dashboard.

Apply with Keywordise AI7-day free trial, no card.

Apply from your AI assistant

Connect Keywordise to your assistant once, then send it the prompt. It applies for you.

ClaudeConnectorChatGPTConnectorMuseby Meta

Claude

  1. In Claude, open Settings, then Connectors, and choose Add custom connector.
  2. Name it Keywordise and paste the connector URL.
  3. Click Connect, log in to Keywordise and approve. Then send the prompt in a new chat.
Connector URL
https://keywordise.com/mcp

Disconnect any time in your Keywordise settings.

ChatGPT

  1. In ChatGPT, open Settings, then Connectors. On plans that need it, turn on developer mode first.
  2. Add a new connector with the connector URL and choose OAuth. Leave the client ID and secret empty.
  3. Log in to Keywordise and approve. Then send the prompt in a new chat.
Connector URL
https://keywordise.com/mcp

Disconnect any time in your Keywordise settings.

Muse

  1. Open Muse (muse.ai or the app) and send it the message below.
  2. If Muse asks how to sign in, answer OAuth. Open the sign-in link it sends, log in to Keywordise and approve.
  3. Send the prompt. Muse asks before it sends anything.
Message for Muse
Add a custom connector called Keywordise. It is a remote MCP server at https://keywordise.com/mcp and uses OAuth. Give me the sign-in link.

Muse is available in the US only for now.

Prompt
Apply to Keywordise job 53zsjfjkeo
How to connect

Questions about this job

Is this job fully remote, and from where?

Yes. The posting lists Senior Application Security Engineer as a remote role for candidates in the United States.

What does this job pay?

The posting does not state a salary, so there is no figure to quote.

What experience is needed?

It is a senior role. The posting asks for: deep application security experience across modern SaaS, including auth, access control, OAuth and CSRF flaws; familiarity with SSRF, crypto and verification issues, data exposure, unsafe deserialization and dependency risks; ability to make risk-based severity calls using exploitability and data sensitivity. Skills it names include Threat modeling, OAuth, CSRF, SSRF.

How do I apply with Keywordise AI?

Click Apply with Keywordise AI, create an account and upload your CV. Your CV and cover letter are written for this job from what you have really done, then Keywordise applies for you. Trial: 7 days, no card.

More remote IT and software jobs

All remote IT and software jobs
Apollo ioRemote, United States
Apply with Keywordise AI