Senior Security Engineer, Application Security
- Remote, United States
- Senior
- Posted 2 days ago
or apply from Claude / ChatGPT / Muse
Hands-on application security and penetration testing role across web apps, APIs, cloud services and AI features. Remote in the United States.
About the role
The security team protects a portfolio of enterprise data infrastructure and SaaS products. Work covers threat modeling, manual testing and retesting fixes, with room to improve automated scanning and CI/CD security workflows.
At a glance
- Pay
- Not stated in the posting
- Remote scope
- Remote, United States
- Seniority
- Senior
- Skills
- Application Security, Penetration Testing, OWASP, SAST, SCA, Kubernetes, Linux, SBOM
- Posted
- 2 Nov 2026
- Last checked
- 3 Nov 2026
What you will do
- Run threat modeling, secure design reviews and targeted code reviews for web apps, APIs, cloud services and appliances
- Perform manual and tool-assisted penetration tests, document reproducible findings and verify fixes
- Coordinate external pen test scoping, report review, remediation tracking and retesting
- Validate customer-reported vulnerabilities and advise Engineering on priorities
- Assess AI-enabled features for access-control gaps, prompt injection and data exposure
What they look for
- About five or more years in security engineering with substantial AppSec or pen testing work
- Demonstrated manual testing of web apps and APIs, including authentication and authorisation issues
- Experience with threat modeling, secure code review and remediation retesting
- Familiarity with OWASP guidance, security testing tools and SDLC controls
- Ability to read code and automate tasks in a scripting or programming language
Nice to have
- Enterprise SaaS, hybrid-cloud or appliance security experience
- SBOM, CycloneDX or SPDX and CI/CD tooling experience
- LLM or agentic feature testing, M&An assessments or audit evidence work
- OSCP, GWAPT, GPEN, GWEB or CSSLP certification
How Keywordise applies for you
Alex Demo
[email protected]
From your CV
Yes, fully remote
- Sent
- 09:41
- Attached
- Your tailored CV
- 1Upload your CVAdd your CV once. It takes about a minute.
- 2Tailored to this jobKeywordise writes a CV and a cover letter for this job from your real experience.
- 3The form fills itselfName, email, experience and screening questions, field by field.
- 4Application sentYou get a receipt and follow it in your dashboard.
Apply with Keywordise AI7-day free trial, no card.
Apply from your AI assistant
Connect Keywordise to your assistant once, then send it the prompt. It applies for you.
Claude
- In Claude, open Settings, then Connectors, and choose Add custom connector.
- Name it Keywordise and paste the connector URL.
- Click Connect, log in to Keywordise and approve. Then send the prompt in a new chat.
https://keywordise.com/mcpDisconnect any time in your Keywordise settings.
ChatGPT
- In ChatGPT, open Settings, then Connectors. On plans that need it, turn on developer mode first.
- Add a new connector with the connector URL and choose OAuth. Leave the client ID and secret empty.
- Log in to Keywordise and approve. Then send the prompt in a new chat.
https://keywordise.com/mcpDisconnect any time in your Keywordise settings.
Muse
- Open Muse (muse.ai or the app) and send it the message below.
- If Muse asks how to sign in, answer OAuth. Open the sign-in link it sends, log in to Keywordise and approve.
- Send the prompt. Muse asks before it sends anything.
Add a custom connector called Keywordise. It is a remote MCP server at https://keywordise.com/mcp and uses OAuth. Give me the sign-in link.Muse is available in the US only for now.
Apply to Keywordise job 2cgsq4sfvwQuestions about this job
Is this job fully remote, and from where?
The posting lists it as remote for people in the United States.
What does this job pay?
No pay range is stated in the posting.
What experience is needed?
It is a senior role. The posting asks for: about five or more years in security engineering with substantial AppSec or pen testing work; demonstrated manual testing of web apps and APIs, including authentication and authorisation issues; experience with threat modeling, secure code review and remediation retesting. Skills it names include Application Security, Penetration Testing, OWASP, SAST.
How do I apply with Keywordise AI?
Click Apply with Keywordise AI, create an account and upload your CV. Your CV and cover letter are written for this job from what you have really done, then Keywordise applies for you. Trial: 7 days, no card.
More remote IT and software jobs
- SSezzleSenior Software Engineer, Security Platform
- USD 5,000 to 9,500 per month
- Remote, Brazil
- GSGuidePoint SecurityApplication Security Intern
- Remote, worldwide
- AIApollo ioSenior Application Security Engineer
- Remote, United States
- MTM&T BankOpenShift Platform Engineer
- USD 116,400 to 194,000 per year
- Remote, United States
- DUDefense UnicornsSenior Software Engineer, Virtual Machines
- Remote, United States
- HHiddenLayerAI Solutions Architect, Pre-sales
- Remote, United Kingdom