Is the Application Security Engineer - SF - Hybrid Preferred, Remote O.K. position at Unit21 fully remote?

Yes, this Application Security Engineer - SF - Hybrid Preferred, Remote O.K. position at Unit21 is a remote position. The role is available for candidates in United States.

What benefits does Unit21 offer for this position?

Unit21 offers the following benefits: 401k Matching, Health Insurance, Paid Time Off, Remote Work, Stock Options.

Application Security Engineer - SF - Hybrid Preferred, Remote O.K. at Unit21

United States

$155k - $175k

<h2 dir="ltr"> About the role </h2> As a Senior Application Security Engineer, you will be a hands-on builder responsible for protecting our platform, our customers, and their data. This is not a governance role; you will spend your time in the code, designing and implementing the systems that secure our products from the ground up. You will own critical security infrastructure, build automations to eliminate entire classes of vulnerabilities, and serve as a deep technical expert for our engineering organization. This role is for an engineer who is passionate about security and wants to solve complex security problems at scale through high-quality, maintainable code. <h2 dir="ltr"> What you'll be doing: </h2> <ul> <li dir="ltr"> Design, code, and deploy automated security controls, services, and frameworks to prevent vulnerabilities at scale. </li> <li dir="ltr"> Build, own, and operate the tools and infrastructure for our application security program, including Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), Software Composition Analysis (SCA), and secret scanning solutions. </li> <li dir="ltr"> Perform hands-on threat modeling, security architecture reviews, and in-depth code reviews (Python/TypeScript) for new products and critical features to ensure they are secure by design. </li> <li dir="ltr"> Conduct penetration tests and vulnerability assessments against our applications and APIs to proactively identify and remediate security weaknesses. </li> <li dir="ltr"> Develop custom tools and automation to streamline security operations and enhance our detection and response capabilities. </li> <li dir="ltr"> Act as a key member of our incident response team during security events. </li> <li dir="ltr"> Mentor and educate product engineers on secure coding best practices, acting as a subject matter expert and fostering a culture of security ownership. </li> </ul> <h2 dir="ltr"> What we're looking for: </h2> Experience: <ul> <li dir="ltr"> 4+ years of hands-on experience in a software engineering or application security role, with a proven track record of shipping code and building security solutions. </li> <li dir="ltr"> Demonstrated history of successful cross-organizational efforts and the ability to drive complex technical projects to completion. </li> </ul> Programming & Scripting: <ul> <li dir="ltr"> Expert-level proficiency in Python, including experience building security tools, automation scripts, or backend services. </li> <li dir="ltr"> Professional experience with Go or TypeScript is a significant plus. </li> </ul> Security Expertise: <ul> <li dir="ltr"> Deep, hands-on knowledge of common application vulnerabilities, such as the OWASP Top 10, and their mitigation techniques. </li> <li dir="ltr"> Proven experience integrating, fine-tuning, and operating security tools (e.g., SAST, DAST, SCA) within developer workflows. </li> <li dir="ltr"> Experience conducting manual penetration tests and vulnerability assessments on web applications and APIs. </li> <li dir="ltr"> Previous experience implementing protections for Generative AI systems is a significant plus. </li> </ul> Cloud & Infrastructure: <ul> <li dir="ltr"> Hands-on experience securing public cloud environments (AWS or GCP). </li> <li dir="ltr"> Basic proficiency with Infrastructure as Code (e.g., Terraform) and containerization technologies (e.g., Docker, ECS, or Kubernetes), including best practices for securing them. </li> <li dir="ltr"> We have a dedicated infrastructure security engineer on staff, so we’re not expecting as much depth there for this role – however, you should be familiar with the basics. </li> </ul> Compensation: The standard base pay range for this role is $155,00.00 - $175,000.00 Annually. This base pay range does not include variable compensation including potential commissions, bonuses or other financial or equity incentives. #BI-Remote <h3 dir="ltr"> Unit21 is an equal opportunity employer, we encourage all to apply, even if you do not meet each requirement above. We are building a diverse, inclusive workforce and hope you will join us! </h3> <h2 dir="ltr"> What we can offer you: </h2> <ul> <li dir="ltr"> Competitive salary and pre-IPO stock options </li> <li dir="ltr"> 100% company-paid medical, dental and vision insurance (for employee) </li> <li dir="ltr"> Optional HSA and FSA medical reimbursement accounts </li> <li dir="ltr"> Unlimited paid time off </li> <li dir="ltr"> Generous leave programs for life events </li> <li dir="ltr"> 401(k) </li> <li dir="ltr"> Charity matching </li> <li dir="ltr"> Annual Learning & Development stipend </li> <li dir="ltr"> One-time Home office set-up stipend </li> <li dir="ltr"> Commuter benefits </li> <li dir="ltr"> Wellness Bundle: One Medical, Headspace, Gympass and Carrot Fertility </li> <li dir="ltr"> Happy hours and team-building events </li> <li dir="ltr"> Great office space in the San Francisco Financial District </li> <li dir="ltr"> Fully stocked kitchen </li> <li dir="ltr"> Lunch and dinner provided in SF office at least 3x per week </li> <li dir="ltr"> A great company culture with a strong emphasis on diversity, equity and inclusion </li> </ul> <h2 dir="ltr"> About Unit21 </h2> Unit21 stops bad actors by leveraging data to deliver justice and safety in the world. We protect businesses against adversaries engaging in money laundering, fraud, and other sophisticated risks by offering no-code infrastructure to model, detect, and remediate suspicious activity. Our customers range from large Fortune 500 companies to high-potential, pre-launch startups. We have reported over USD $2 billion in fraud and laundered money to the US government using our software. We are a rapidly growing Series C startup, having raised close to $100m from Google, Tiger Global, ICONIQ Capital, Jack Dorsey, Diane Greene, and other leading VCs. Our team believes deeply in fostering individual ownership, iterative product development, and empathetic communication. There are many challenging problems to solve in this industry, and a huge opportunity for our software to empower companies to define a new standard of eliminating bad behavior on their platforms. We encourage people of all backgrounds to apply. Unit21 is committed to creating an inclusive culture, and we celebrate diversity of all kinds.

Apply Now

Remote Opportunity

Application Security Engineer - SF - Hybrid Preferred, Remote O.K.

Q: Is this a full-time or part-time Application Security Engineer - SF - Hybrid Preferred, Remote O.K. role?

This is a full-time Application Security Engineer - SF - Hybrid Preferred, Remote O.K. position at Unit21.

Q: What are the main requirements for the Application Security Engineer - SF - Hybrid Preferred, Remote O.K. role?

Key requirements include: Design, code, and deploy automated security controls, services, and frameworks to prevent vulnerabilities at scale., Build, own, and operate the tools and infrastructure for our application security program, including Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), Software Composition Analysis (SCA), and secret scanning solutions., Perform hands-on threat modeling, security architecture reviews, and in-depth code reviews (Python/TypeScript) for new products and critical features to ensure they are secure by design., and more.

Q: What is the salary range for the Application Security Engineer - SF - Hybrid Preferred, Remote O.K. position?

The salary range for this Application Security Engineer - SF - Hybrid Preferred, Remote O.K. role is $155k - $175k.

Q: How do I apply for the Application Security Engineer - SF - Hybrid Preferred, Remote O.K. position at Unit21?

You can apply for this Application Security Engineer - SF - Hybrid Preferred, Remote O.K. position by clicking the "Apply Now" button on this page, which will take you to Unit21's application portal.

Join Unit21 as a senior professional working remotely from United States. Explore the role, benefits, and apply in one place.

Application Security Engineer - SF - Hybrid Preferred, Remote O.K.

Unit21

Full Time

$155k - $175k

9 months ago

About the role As a Senior Application Security Engineer, you will be a hands-on builder responsible for protecting our platform, our customers, and their data.

United States

Engineering

Senior

Python

TypeScript

Static Application Security Testing

+5 more

Job Description

About the role

As a Senior Application Security Engineer, you will be a hands-on builder responsible for protecting our platform, our customers, and their data. This is not a governance role; you will spend your time in the code, designing and implementing the systems that secure our products from the ground up. You will own critical security infrastructure, build automations to eliminate entire classes of vulnerabilities, and serve as a deep technical expert for our engineering organization. This role is for an engineer who is passionate about security and wants to solve complex security problems at scale through high-quality, maintainable code.

What you'll be doing:

Design, code, and deploy automated security controls, services, and frameworks to prevent vulnerabilities at scale.
Build, own, and operate the tools and infrastructure for our application security program, including Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), Software Composition Analysis (SCA), and secret scanning solutions.
Perform hands-on threat modeling, security architecture reviews, and in-depth code reviews (Python/TypeScript) for new products and critical features to ensure they are secure by design.
Conduct penetration tests and vulnerability assessments against our applications and APIs to proactively identify and remediate security weaknesses.
Develop custom tools and automation to streamline security operations and enhance our detection and response capabilities.
Act as a key member of our incident response team during security events.
Mentor and educate product engineers on secure coding best practices, acting as a subject matter expert and fostering a culture of security ownership.

What we're looking for:

Experience:

4+ years of hands-on experience in a software engineering or application security role, with a proven track record of shipping code and building security solutions.
Demonstrated history of successful cross-organizational efforts and the ability to drive complex technical projects to completion.

Programming & Scripting:

Expert-level proficiency in Python, including experience building security tools, automation scripts, or backend services.
Professional experience with Go or TypeScript is a significant plus.

Security Expertise:

Deep, hands-on knowledge of common application vulnerabilities, such as the OWASP Top 10, and their mitigation techniques.
Proven experience integrating, fine-tuning, and operating security tools (e.g., SAST, DAST, SCA) within developer workflows.
Experience conducting manual penetration tests and vulnerability assessments on web applications and APIs.
Previous experience implementing protections for Generative AI systems is a significant plus.

Cloud & Infrastructure:

Hands-on experience securing public cloud environments (AWS or GCP).
Basic proficiency with Infrastructure as Code (e.g., Terraform) and containerization technologies (e.g., Docker, ECS, or Kubernetes), including best practices for securing them.
We have a dedicated infrastructure security engineer on staff, so we’re not expecting as much depth there for this role – however, you should be familiar with the basics.

Compensation:

The standard base pay range for this role is $155,00.00 - $175,000.00 Annually. This base pay range does not include variable compensation including potential commissions, bonuses or other financial or equity incentives.

#BI-Remote

Unit21 is an equal opportunity employer, we encourage all to apply, even if you do not meet each requirement above. We are building a diverse, inclusive workforce and hope you will join us!

What we can offer you:

Competitive salary and pre-IPO stock options
100% company-paid medical, dental and vision insurance (for employee)
Optional HSA and FSA medical reimbursement accounts
Unlimited paid time off
Generous leave programs for life events
401(k)
Charity matching
Annual Learning & Development stipend
One-time Home office set-up stipend
Commuter benefits
Wellness Bundle: One Medical, Headspace, Gympass and Carrot Fertility
Happy hours and team-building events
Great office space in the San Francisco Financial District
Fully stocked kitchen
Lunch and dinner provided in SF office at least 3x per week
A great company culture with a strong emphasis on diversity, equity and inclusion

About Unit21

Unit21 stops bad actors by leveraging data to deliver justice and safety in the world. We protect businesses against adversaries engaging in money laundering, fraud, and other sophisticated risks by offering no-code infrastructure to model, detect, and remediate suspicious activity. Our customers range from large Fortune 500 companies to high-potential, pre-launch startups. We have reported over USD $2 billion in fraud and laundered money to the US government using our software.

We are a rapidly growing Series C startup, having raised close to $100m from Google, Tiger Global, ICONIQ Capital, Jack Dorsey, Diane Greene, and other leading VCs. Our team believes deeply in fostering individual ownership, iterative product development, and empathetic communication. There are many challenging problems to solve in this industry, and a huge opportunity for our software to empower companies to define a new standard of eliminating bad behavior on their platforms.

We encourage people of all backgrounds to apply. Unit21 is committed to creating an inclusive culture, and we celebrate diversity of all kinds.

Requirements

Design, code, and deploy automated security controls, services, and frameworks to prevent vulnerabilities at scale.
Build, own, and operate the tools and infrastructure for our application security program, including Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), Software Composition Analysis (SCA), and secret scanning solutions.
Perform hands-on threat modeling, security architecture reviews, and in-depth code reviews (Python/TypeScript) for new products and critical features to ensure they are secure by design.
Conduct penetration tests and vulnerability assessments against our applications and APIs to proactively identify and remediate security weaknesses.
Develop custom tools and automation to streamline security operations and enhance our detection and response capabilities.
Act as a key member of our incident response team during security events.
Mentor and educate product engineers on secure coding best practices, acting as a subject matter expert and fostering a culture of security ownership.

Benefits

401k Matching
Health Insurance
Paid Time Off
Remote Work
Stock Options

Skills

Python

TypeScript

Static Application Security Testing

Dynamic Application Security Testing

Software Composition Analysis

secret scanning solutions

penetration tests

vulnerability assessments

Ready to Apply?

Join Unit21 today

Salary Range

$155k - $175k

Posted 9 months ago

More Engineering roles you might like

Discover similar opportunities from companies that are also hiring remotely.

Consultor Oracle Fusion SCM / PLM - Bilingüe Remoto

Towa

Full Time

15 hours ago

📍 Modalidad: Remoto | 🇲🇽 Vacante exclusiva para residentes mexicanos 🗣️ Inglés: Conversacional avanzado indispensable 🕐 Horario: 1:00 PM a 8:00 PM PST (horario de California) 💰 Esquema de contratación: Honorarios 🚀 Sobre la posición Buscamos una persona para la posición de Consultor(a)…

Mexico

Engineering

Backend Engineering

Senior

Oracle Fusion Cloud SCM

Supply Chain Management

Product Lifecycle Management

+5 more

Senior Webflow Developer

Brightscout

Full Time

15 hours ago

The Role As a Senior Webflow Developer at BRIGHTSCOUT , you will own the architecture and implementation of complex Webflow websites for B2B tech companies.

Argentina

Engineering

Backend Engineering

Senior

Webflow

HTML

CSS

+5 more

Assistant Team Leader - FCM After Hours

Flight Centre

Full Time

16 hours ago

  About the Opportunity Join Corporate After Hours and play a key leadership role supporting operational excellence across a 24/7 environment.   As an Assistant Team Leader, you'll work closely with Team Leaders to deliver exceptional service outcomes, support team performance, and foster…

Worldwide

Engineering

Backend Engineering

Mid

Leadership

Operational Excellence

Customer Service

+5 more

Explore more remote openings

Browse fresh listings from our global community of remote-friendly teams.

Appointment Setter (Telesales, Freelance, Remote)

In Marketing We Trust

Contract

15 hours ago

What In Marketing We Trust is all about We're a technical performance marketing agency, and we exist to solve tough problems in marketing. We bring an engineering mindset to complex marketing situations to deliver scalable performance that generates an exponential return on investment.

Australia

Sales

Account Executive

Mid

Telesales

Lead Qualification

Appointment-setting

+5 more

Appointment Setter (Telesales, Freelance, Remote)

In Marketing We Trust

Contract

15 hours ago

Australia

Sales

Account Executive

Mid

Telesales

Lead Qualification

Appointment-setting

+5 more

QA Analyst

Brightscout

Full Time

15 hours ago

The Role As a Quality Assurance Analyst at BRIGHTSCOUT, you will play a crucial role in ensuring the quality and flawless execution of our digital experiences—across both websites and applications.

Argentina

Data

Data Science

Mid

Quality Assurance

Functional Testing

Visual Testing

+5 more

Revenue Operations Specialist (Toronto, Canada)

Fortive

Full Time

16 hours ago

Revenue Operations Specialist Position Overview The Revenue Operations Specialist plays a key role in supporting Intelex's Quote-to-Cash (QTC) process by partnering with Sales, Renewals, Finance, Billing, Legal, and other cross-functional teams.

Canada

Operations

Mid

Revenue Operations

Sales Operations

Salesforce

+5 more

Sales Manager Filtration Africa & Nordics

Imerys

Full Time

16 hours ago

The Company Imerys is the world’s leading supplier of mineral-based specialty solutions for the industry with €3.4 billion in revenue and 12,300 employees in 40 countries in 2025.

France

Sales

Account Executive

Senior

Sales Management

Strategic Account Planning

Commercial negotiation

+5 more

Program Manager

Shuru Technologies Private Limited

Full Time

16 hours ago

This is a remote position. Shuru is a self-managed technology team specializing in accelerating visions through product, technology, and AI leadership. With a focus on bespoke execution, we deliver impactful solutions that are scalable and designed for success.

Worldwide

Operations

Mid

Scrum

Agile

Jira

+5 more

Candidate Manager, Fixed Term (6 months)

InstantScripts

Contract

AUD 70k - AUD 80k

16 hours ago

Company Description At InstantScripts, we believe healthcare should be accessible, flexible, and driven by excellence. As Australia's leading online medical services provider, we are reshaping how patients access care, and that starts with building an exceptional clinical workforce.

Australia

Engineering

Backend Engineering

Mid

Recruitment

Candidate Management

Credentialing

+5 more

DevOps Support Engineer

Buildkite

Full Time

16 hours ago

About Buildkite Buildkite's CI platform is trusted by the world's leading engineering teams, helping ship software used by more than 1 billion people every day.

United Kingdom

Ireland

Poland

Engineering

DevOps / SRE

Senior

Bash

Ruby on Rails

Golang

+5 more

Senior Customer Advocate (English & German)

Boldr

Full Time

16 hours ago

A LITTLE BIT ABOUT Boldr • Boldr is the first global B-Corp dedicated to delivering world-class Client experiences while creating access to dignified, meaningful work in communities worldwide. • We are a global team, united by our desire to connect diverse people with common values for boldr impact.

Mexico

Engineering

Backend Engineering

Mid

Customer Service

Email Support

Chat support

+5 more

Customer Support Specialist

Pearl Certification

Full Time

$55k - $65k

17 hours ago

About the role The Customer Support Specialist handles front line customer requests and the operational data work that keeps Pearl’s certification and reporting pipeline running.

United States

Customer Success

Customer Success Management

Entry

Customer Support

Data Processing

Ticket Management

+5 more

Sr. Technical Program Manager I (Remote Eligible in Bulgaria)

Smartsheet

Full Time

€38.5k - €47.25k

17 hours ago

For over 20 years, Smartsheet has empowered teams to manage work seamlessly and scale solutions smarter. Now, in our most ambitious chapter yet, we are uniting human teams with AI agents.

Worldwide

Operations

Senior

Program Management

Project Management

Change Management

+5 more

Ad Monetization Manager (Remote)

Mode Mobile

Full Time

17 hours ago

Who We Are ( Mode.Inc ) Mode.Inc is the parent company of a portfolio of technology businesses, including Mode Mobile, the creator of EarnOS, a transformational software platform that turns ordinary smartphones into "EarnPhones".

Worldwide

Engineering

Backend Engineering

Mid

Ad operations

Revenue Optimization

Data Analysis

+5 more