About the role

Application Security Engineer securing GenAI products and emerging businesses. Building security tools, reviewing code, and improving application, cloud, and infrastructure security at Liftoff’s mobile marketing platform.

Responsibilities

Establish secure software development standards and integrate security into engineering design and development
Create self-service security workflows, reusable tools, and secure design patterns
Perform design and code reviews, threat modeling, and security assessments for GenAI, Creative GenAI, and emerging businesses
Design and assess sandbox isolation
Partner with stakeholders to build a security-minded engineering culture
Triage security issues, prioritize vulnerabilities by risk, and coordinate remediation and verification
Assess vendors and AI tools for security controls and secure employee use
Participate in the security team's on-call and incident-response rotation
Conduct blameless post-incident reviews, document findings, and track remediation
Build maintainable security tools and automation, including an AI-assisted code-security triage pilot
Partner with Detection & Response on detection improvements and response guidance
Contribute across application, cloud, and infrastructure security, including Accelerate and MX

5+ years of relevant experience in security engineering or software engineering
Excellent judgment in prioritizing security efforts using a risk-based approach
Experience partnering with cross-functional teams to deliver security improvements
Ability to write production-quality code for security tools and automation
Ability to review pull requests and navigate large, unfamiliar codebases
Strong understanding of secure software design, application and API security, authentication and authorization, threat modeling, and code review
Experience assessing cloud and infrastructure security
Ability to quickly understand complex engineering systems and architecture
Experience with testing, observability, version control, peer code review, continuous integration, and blameless postmortems
Strong technical writing skills for design documents, proposals, runbooks, and post-incident reviews
Willingness to participate in on-call and incident-response responsibilities, including occasional off-hours response
Experience with Go, Python, Clojure, or JavaScript is desirable
Experience securing GenAI applications, designing sandboxes, or evaluating AI-assisted security tools is desirable
Experience scaling cloud security or working with high-velocity software engineering teams, mobile advertising, or high-volume SaaS environments is desirable

Full-time remote work in an approved U.S. state or Canada
Opportunities for in-person project meetings, regional meetups, and company-wide events
Competitive salaries, equity, and benefits
Medical coverage
Wellness stipends
Additional perks based on country of residence
Quarterly in-person team gatherings