Application Security Engineer

Job Description

Job Description

About Us :

Versana is an industry-backed fintech on a mission to make the syndicated loan market better. By digitally capturing agent banks’ data on a real-time basis, Versana provides unprecedented transparency into loan-level details and portfolio positions, bringing efficiency and velocity to the entire market. Through our platform, participants can rest assured they are accessing the loan market’s most credible source of deal information.

About You :

Versana is looking for a Security Engineer to join our InfoSec squad. You will play an essential role in safeguarding our organization's information systems and data from potential threats and vulnerabilities. You will work collaboratively with senior engineers and cross-functional teams to enhance our security posture using cutting-edge technologies.

Key Responsibilities :

• Identify and help remediate application security vulnerabilities, ensuring compliance with industry standards and best practices.
• Integrate and maintain security tooling in CI / CD (SAST, SCA, DAST, container and secrets scanning) and collaborate with developers to tune signal vs noise.
• Assist in the configuration and management of security tools (e.g. DLP, SIEM, CNAPP, Cloud Security Posture Management tools).
• Configure and tune security monitoring and alerting (log sources, detection rules, dashboards) to reduce false positives and improve actionable signal.
• Participate in threat modeling and secure design reviews for new and existing applications.
• Participate in incident response activities, including containment, eradication, and recovery efforts.
• Work continuously with cross-functional teams (engineering, DevOps, product, QA) to embed security controls and guidance throughout the SDLC (“shift left”).
• Contribute to securing AI / ML / LLM related technologies (prompt injection defenses, output filtering, API key / secret protection, data minimization, monitoring for misuse).
• Automate repetitive security tasks and reporting where possible (scripts, pipeline jobs, policy-as-code).
• Support the implementation of security policies, procedures, and standards.
• Stay up-to-date with the latest security trends, threats, and technology advancements.

Must Haves :

Nice to Haves :

Equal Opportunity Employer

We are committed to providing equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training.

We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.