SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Salary: USD 160,000 - 210,000 / annual
Vannevar Labs is a defense technology company building AI systems to deter adversaries and model adversary behavior for decision-makers. The company has grown from $3M to $80M ARR in three years and achieved unicorn status.
As an Application Security Engineer, you will embed security into the SaaS platform and enable rapid, secure feature delivery. You will partner with software, DevOps, and platform teams to integrate threat modeling, automated scanning (SAST/SCA/DAST), and vulnerability response into every stage of the software development lifecycle. Your work will protect customer data, support compliance milestones, and scale the security posture as the company grows.
Key responsibilities include:
- Implement and deploy enterprise-standard SAST, SCA, secrets-scanning, DAST, and container/IaC checks in CI/CD pipelines
- Embed with development teams to conduct threat models, review critical pull requests, and coach secure-by-default practices
- Drive a shift-left vulnerability detection program to identify and remediate issues earlier in the SDLC
- Coordinate with DevOps on application security issues spanning application and infrastructure layers
- Support incident response for product issues and feed lessons back into code, documentation, and process
Required qualifications:
- 5+ years in Application or Product Security
- Hands-on experience securing web applications and automating AppSec workflows
- Familiarity with DevSecOps practices and container security & patching
- Experience with GitHub Actions, Python, TypeScript/JavaScript
- Clear communicator who can translate security risk for engineers
Nice-to-have qualifications include experience securing LLM workflows, NIST Risk Management Framework, software security at a U.S. defense contractor, and active security clearance or ability to obtain one.
