SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Altruist is transforming the wealth management industry with an AI platform for financial advisors. The company partners with advisors nationwide to help them grow, optimize resources, and deliver superior client outcomes.
You will join the Security team as a Senior Application Security Engineer, responsible for ensuring products are secure from design through the CI/CD pipeline. This is a hybrid role requiring three days per week onsite in the Los Angeles (Culver City) or San Francisco office.
Key responsibilities include:
- Educate and train development teams on secure coding practices and emerging threats
- Perform technical security assessments and code reviews across Java/Spring services
- Conduct threat modeling to anticipate and mitigate potential security threats
- Build libraries, repeatable patterns, and secure-by-default components for development teams
- Own and tune SAST, DAST, SCA, and security tooling in CI/CD pipelines; triage and prioritize findings
- Partner with engineering to close authentication/authorization gaps and systemic security issues
- Collaborate with Detection & Response and offensive security teams to develop durable detections
- Contribute to secure SDLC standards and developer security guardrails
Required qualifications:
- 4+ years as an Application or Product Security Engineer
- Extensive experience with security assessments, design reviews, or threat modeling
- Hands-on secure code review experience (Java/Spring or similar)
- Experience operating SAST/DAST/SCA and secrets-scanning tools in CI/CD pipelines
- Strong independent work capability
- B.A./B.S. in Computer Science, Computer Engineering, Information Security, or equivalent experience
- Proficiency with modern tech stacks (Java, Spring, Terraform, Kubernetes)
- Excellent communication and collaborative problem-solving skills
Bonus experience includes work in regulated fintech/financial services environments and AppSec automation.
