Brex12.06.2026
Senior Application Security Engineer (Remote)
Зарплата не указана
United States
Обязанности
- 01Finding and responding to security vulnerabilities across the Brex platform
- 02Performing code reviews, design reviews, penetration testing, and vulnerability management
- 03Developing and maintaining tooling to perform static and dynamic testing of the Brex platform
- 04Supporting secure developer workflows through tooling
- 05Identifying vulnerabilities, demonstrating business impact, and articulating the risk of specific vulnerabilities to drive prioritization efforts
- 06Performing penetration testing and design reviews, looking for vulnerabilities and insecure designs, working with engineering and product to design secure product features
- 07Maintaining and building internal tools to automate security efforts, performing SAST and DAST testing of the Brex platform, and supporting secure development practices
- 08Building and contributing to a culture of collaborative security excellence through technical leadership, learning sessions, and mentorship within the team and wider organization
Требования
- 015+ years work experience in an Application Security or related role
- 02Ability to find vulnerabilities in complex systems, demonstrating business impact through custom attack chains
- 03Experience with a wide range of secure development activities including threat modeling, developer education, and incident response
- 04Knowledge of Python, scripting languages, and AI/agentic workflows to automate tasks, build tools and improve productivity
- 05Collaborative mindset paired with strong written and verbal communication skills
- 06Proficiency with Kotlin, gRPC, GraphQL, Kubernetes
- 07Previous experience as a software engineer
- 08Consultancy experience performing web application security reviews
- 09Experience with securing distributed systems in AWS and cloud environments
- 10Experience with pentesting and securing agentic features and systems
- 11Contributions to the wider technical community— open source, public research, mentorship, community organizing, blogging, CVEs, presentations, etc
- 12Experience submitting to bug bounty programs or responsible disclosure programs
Условия
- 01Remote position
- 02Expected salary range: $192,000 - $240,000
- 03Equity and other forms of compensation may be provided as part of total compensation package
- 04Brex LLC is a wholly owned subsidiary of Capital One, N.A.
- 05Job-seekers should be aware of malicious actors; Brex recruiters only contact via LinkedIn or email with brex.com domain