SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Salary: USD 200,000 - 260,000 / annual
Panthalassa is a renewable energy and ocean technology company developing devices that capture ultra-low-cost renewable energy from the ocean for computing and renewable fuel applications. The company is a public benefit corporation headquartered in Portland, Oregon, backed by leading venture capitalists and philanthropic investors.
As an Application Security Engineer, you will advance Panthalassa's application security capabilities, partnering closely with the Director of Information Security and software engineering teams. You will bring broad application security and software engineering expertise, strong technical judgment, and the ability to quickly understand unfamiliar languages, frameworks, and architectures.
Key responsibilities include:
- Assisting the Head of Information Security in building out the AppSec function
- Conducting code and service architecture reviews to provide security guidance
- Leading engineers in threat modeling applications and services
- Defining culturally useful software security metrics
- Assisting in interviewing and onboarding of security personnel
- Supporting incident response and handling
- Integrating, maintaining, and automating security scanning tools (SAST, DAST, SCA, secrets management) into CI/CD pipelines
- Building and integrating agentic security tools for company needs
- Conducting hands-on threat modeling and architectural design reviews before code is written
- Performing manual and automated secure code reviews and targeted penetration testing on web and mobile applications
- Managing the company's external Vulnerability Disclosure or Bug Bounty programs and translating regulatory compliance requirements into practical engineering tasks
You should thrive in a creative, scrappy, and collaborative environment where the best ideas change the company's direction regularly.
REQUIREMENTS:
- 6+ years of experience with Application Security processes
- 2+ years of experience as a Team Lead or Manager of an Application Security team
- Broad and deep Application Security foundational knowledge
- Experience with using AI systems and agents for security outcomes in a professional capacity
- Deep understanding of OWASP Top 10, CWE Top 25, and secure design patterns
- Hands-on experience with industry-standard security tools (Snyk, GitHub Advanced Security, Burp Suite, Fortify)
- Bachelor's degree in Computer Science, Cybersecurity, or equivalent practical experience
DESIRED QUALIFICATIONS:
- Experience with software development in mechanical engineering environments
- Familiarity with cloud platforms (AWS, Azure, GCP) and modern infrastructure tools (Docker, Kubernetes, Infrastructure as Code)
ADDITIONAL REQUIREMENTS:
- Travel to conferences, vendors, and test sites as needed
- Ability to work longer hours and weekends intermittently to support critical needs
