Senior Application Security Engineer

Job Title : Senior Application Security Engineer

Location : Denver, CO (Hybrid)

About FusionAuth

FusionAuth is a fast-growing startup and leading provider of customer identity and access management (CIAM) software headquartered in Denver, Colorado. Our mission is to make authentication and authorization simple and secure for every developer.  Our product helps businesses securely manage customer identities and access, ensuring a seamless and safe user experience for some of the largest brands in the world. We are committed to delivering exceptional value and satisfaction to our clients through top-notch service and support.  With a great team and strong investors, we are expanding our team to help accelerate our growth and take FusionAuth to the next level.

Job Summary

We are seeking a Senior Application Security Engineer to join our engineering team. In this role, you will be responsible for ensuring that our applications and infrastructure meet stringent security standards. Additionally, you will be instrumental in fostering a security-centric culture throughout the engineering teams. To excel in this position, you should possess a creative and quantitative mindset, along with a deep understanding of secure coding practices. A strong passion for authentication, authorization, and user management is essential. Prior experience in security-focused roles or practices, such as penetration testing (PEN testing), bug bounties, or similar endeavors, will be highly valued. This position is based in the Broomfield, CO area and requires part time attendance 1-2 days per week in the office.

Responsibilities

• Participate in threat modeling, code reviews, and security audits to strengthen our applications against vulnerabilities.
• Manage our bug bounty program by validating submissions and assessing awards.
• Research and integrate security tools into our development processes and pipelines.
• Design and implement new features with an emphasis on secure coding practices and risk mitigation.
• Write and maintain extensive, security-focused tests, including unit, integration, and vulnerability tests.
• Maintain our software with bug fixes, enhancements, and security patches.
• Produce clear, high-quality documentation for new features and security protocols.
• Contribute to platform roadmap planning and software architecture with an application security perspective, including prioritization of security-related bug fixes.
• Advocate for best practices in security within the Engineering organization, including developing training curricula on secure coding practices.

Qualifications Required

All About You

We believe the following qualities will enhance your success in this role :

Compensation

Onsite Perks & Campus Benefits

When you join FusionAuth’s Denver team, you’ll enjoy a modern campus experience designed for productivity, wellness, and community :

Enjoy a high-tech business environment that inspires creativity and energizes your workday—all just minutes from the heart of Denver and Boulder.

Benefits

For full-time team members, we offer :

Important Details

If you are passionate about technology that solves real-world customer problems, and want to join a company that is moving the industry forward, FusionAuth is a perfect fit for you!

Equal Employment Opportunity

FusionAuth provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training.

E-Verify | Right to Work

Recruiters

FusionAuth does not accept unsolicited resumes from recruiters or employment agencies. In the absence of a signed agreement, we reserve the right to pursue and hire candidates without any financial obligation to the recruiter or agency. Any unsolicited resumes, including those submitted directly to hiring managers, are deemed to be the property of FusionAuth.