Talent.com
Senior Application Security Engineer
Senior Application Security EngineerBrex • Seattle, WA, United States
Senior Application Security Engineer

Senior Application Security Engineer

Brex • Seattle, WA, United States
21 hours ago
Job type
  • Full-time
Job description

Why join us

Brex is the AI-powered spend platform. We help companies spend with confidence with integrated corporate cards, banking, and global payments, plus intuitive software for travel and expenses. Tens of thousands of companies from startups to enterprises - including DoorDash, Flexport, and Compass - use Brex to proactively control spend, reduce costs, and increase efficiency on a global scale.

Working at Brex allows you to push your limits, challenge the status quo, and collaborate with some of the brightest minds in the industry. We're committed to building a diverse team and inclusive culture and believe your potential should only be limited by how big you can dream. We make this a reality by empowering you with the tools, resources, and support you need to grow your career.

Engineering at Brex

Engineering at Brex is about building systems that scale with speed and intention. Our teams span Software, Data, Security, and IT, and operate with high autonomy and deep collaboration. We tackle hard technical problems, own our outcomes, and push for excellence at every level - from architecture to deployment. It's an environment where engineering is a craft, and builders become leaders.

What you'll do

As a Senior Application Security Engineer, you will focus on finding and responding to security vulnerabilities across the Brex platform. In this role, you will perform code reviews, design reviews, penetration testing, and vulnerability management. You will develop and maintain tooling to perform static and dynamic testing of the Brex platform and tooling which supports secure developer workflows. Application Security is part of our wider Financial Scale organization, which means you will work closely with Security Operations, GRC, Product Security, Front End Platform, IT Infrastructure teams.

We're looking for individuals with a strong background and interest in penetration testing. You should have a demonstrated ability to find vulnerabilities in complex systems and craft exploits to demonstrate business impact. This role is highly cross functional and collaborative, you will have the opportunity to work with every engineering team across Brex. You should be enthusiastic about working with a variety of backgrounds, roles, and needs. Building a world-class financial service requires world-class security.

Brex is pioneering the next wave of AI-driven financial services for dynamic, high-impact companies like Coinbase, Robinhood, and Anthropic. We're at the early stages of integrating AI across our product suite, this role will have the opportunity to influence and secure the future of AI Security at Brex. You'll be at the forefront of securing our novel AI implementations, identifying attack vectors in agentic-powered features, and partnering with product and engineering teams to build AI capabilities that our customers can trust with their critical financial operations.

Where you'll work

This role will be based in our Seattle office. We are a hybrid environment that combines the energy and connections of being in the office with the benefits and flexibility of working from home. We currently require a minimum of three coordinated days in the office per week, Monday, Wednesday and Thursday. As a perk, we also have up to four weeks per year of fully remote work!

Responsibilities

  • Identifying vulnerabilities, demonstrating business impact, and articulating the risk of specific vulnerabilities to drive prioritization efforts
  • Perform penetration testing and design reviews, looking for vulnerabilities and insecure designs, work with engineering and product to design secure product features
  • Maintain and build internal tools to automate security efforts, perform SAST and DAST testing of the Brex platform, and support secure development practices
  • Build and contribute to a culture of collaborative security excellence through technical leadership, learning sessions, and mentorship within the team and wider organization

Requirements

  • 5+ years work experience in an Application Security or related role
  • Ability to find vulnerabilities in complex systems, demonstrating business impact through custom attack chains
  • Experience with a wide range of secure development activities including- threat modeling, developer education, and incident response
  • Knowledge of Python, scripting languages, and AI / agentic workflows to automate tasks, build tools and improve productivity
  • Collaborative mindset paired with strong written and verbal communication skills
  • Bonus points

  • Proficiency with Kotlin, gRPC, GraphQL, Kubernetes
  • Previous experience as a software engineer
  • Consultancy experience performing web application security reviews
  • Experience with securing distributed systems in AWS and cloud environments
  • Experience with pentesting and securing agentic features and systems
  • Contributions to the wider technical community- open source, public research, mentorship, community organizing, blogging, CVEs, presentations, etc
  • Experience submitting to bug bounty programs or responsible disclosure programs
  • Compensation

    The expected salary range for this role is $192,000 - $240,000. However, the starting base pay will depend on a number of factors including the candidate's location, skills, experience, market demands, and internal pay parity. Depending on the position offered, equity and other forms of compensation may be provided as part of a total compensation package.

    Please be aware, job-seekers may be at risk of targeting by malicious actors looking for personal data. Brex recruiters will only reach out via LinkedIn or email with a brex.com domain. Any outreach claiming to be from Brex via other sources should be ignored.

    Create a job alert for this search

    Senior Application Security Engineer • Seattle, WA, United States

    Related jobs
    Lead Cybersecurity - Application Security DevSecOps Engineer

    Lead Cybersecurity - Application Security DevSecOps Engineer

    AT&T • Bothell, WA, United States
    Full-time
    This position requires office presence of a minimum of 5 days per week and is only located in the location(s) posted.Join AT&T and reimagine the communications and technologies that connect the wor...Show more
    Last updated: 12 days ago • Promoted
    Senior Product Security Engineer

    Senior Product Security Engineer

    The Boeing Company • Seattle, WA, United States
    Permanent
    At Boeing, we innovate and collaborate to make the world a better place.We're committed to fostering an environment for every teammate that's welcoming, respectful and inclusive, with great opportu...Show more
    Last updated: 21 hours ago • Promoted • New!
    Senior Application Security Engineer II

    Senior Application Security Engineer II

    Axon • Seattle, WA, United States
    Full-time
    Join Axon and be a Force for Good.At Axon, we're on a mission to Protect Life.We're explorers, pursuing society's most critical safety and justice issues with our ecosystem of devices and cloud sof...Show more
    Last updated: 21 hours ago • Promoted • New!
    Senior Security Assurance Engineer

    Senior Security Assurance Engineer

    Microsoft Corporation • Redmond, WA, United States
    Full-time
    The Cloud & AI organization accelerates Microsoft's mission and bold ambitions to ensure that our company and industry is securing digital technology platforms, devices, and clouds in our customers...Show more
    Last updated: 30+ days ago • Promoted
    Senior Security Engineer for Quantum Computing

    Senior Security Engineer for Quantum Computing

    Amazon • Seattle, WA, United States
    Permanent
    The AWS Center for Quantum Computing (CQC) in Pasadena, CA is actively seeking a Senior Security Engineer who will play a crucial role in designing and overseeing security operations for a dynamic ...Show more
    Last updated: 3 days ago • Promoted
    Security Engineer-Redmond, WA

    Security Engineer-Redmond, WA

    Georgia IT Inc • Redmond, WA, United States
    Full-time
    Security Engineer - prefer someone who has experience working on Department of Defense engagements.Location - Redmond, WA (onsite). US Citizens, Green Cards & GC-EAD Preferred.No Third-party C2C is ...Show more
    Last updated: 15 hours ago • Promoted • New!
    Senior Endpoint Security Engineer

    Senior Endpoint Security Engineer

    Truveta • Seattle, WA, United States
    Full-time
    Senior Endpoint Security Engineer.Truveta is the world's first health provider led data platform with a vision of Saving Lives with Data. Our mission is to enable researchers to find cures faster, e...Show more
    Last updated: 1 day ago • Promoted
    Principal Application Security Engineer

    Principal Application Security Engineer

    Henry Schein • Seattle, WA, United States
    Full-time
    We are open to this role working 100% remote within the United States.Unfortunately, Henry Schein One is unable to hire individuals residing in Alaska, North Dakota, Hawaii, West Virginia, Maryland...Show more
    Last updated: 22 days ago • Promoted
    Sr. Application Security Engineer

    Sr. Application Security Engineer

    SpaceX • Redmond, WA, United States
    Permanent
    SpaceX was founded under the belief that a future where humanity is out exploring the stars is fundamentally more exciting than one where we are not. Today SpaceX is actively developing the technolo...Show more
    Last updated: 21 hours ago • Promoted • New!
    Senior Security Engineer (Product)

    Senior Security Engineer (Product)

    Headway • Seattle, WA, United States
    Full-time
    The Trust team at Headway is focused on security and privacy for all of Headway’s customers - therapists, patients, and payers (ex : insurance companies and health systems).As an early member on the...Show more
    Last updated: 1 day ago • Promoted
    Senior Product Security Engineer

    Senior Product Security Engineer

    Halcyon • Seattle, WA, United States
    Full-time
    Halcyon is the industry's first dedicated, adaptive security platform that combines multiple proprietary advanced prevention engines along with AI models focused specifically on stopping ransomware...Show more
    Last updated: 21 hours ago • Promoted • New!
    Application Security Engineer

    Application Security Engineer

    Palantir Technologies • Seattle, WA, United States
    Full-time
    Palantir builds the world's leading software for data-driven decisions and operations.By bringing the right data to the people who need it, our platforms empower our partners to develop lifesaving ...Show more
    Last updated: 22 days ago • Promoted
    Application Security Engineer, Privacy

    Application Security Engineer, Privacy

    META • Seattle, WA, United States
    Full-time
    Meta's Privacy Engineering team is seeking a Privacy Engineer with experience in identifying, scoping, containing and eradicating real-world privacy threats to products and infrastructure.Your prim...Show more
    Last updated: 21 hours ago • Promoted • New!
    Senior Product Security Engineer

    Senior Product Security Engineer

    Boeing • Everett, WA, United States
    Permanent
    At Boeing, we innovate and collaborate to make the world a better place.We're committed to fostering an environment for every teammate that's welcoming, respectful and inclusive, with great opportu...Show more
    Last updated: 1 hour ago • Promoted • New!
    Application Security Engineer

    Application Security Engineer

    Mechanics Bank • Seattle, WA, United States
    Full-time
    Here at Mechanics Bank, we value connection, partnership, long term relationships and working together in person.This role can work remote within the US. Under limited direction, the Application Sec...Show more
    Last updated: 30+ days ago • Promoted
    Mid-Level or Senior Product Security Engineer (Cybersecurity)

    Mid-Level or Senior Product Security Engineer (Cybersecurity)

    Boeing • Everett, WA, United States
    Permanent
    Mid-Level or Senior Product Security Engineer (Cybersecurity) at BOEING summary : .The Mid-Level or Senior Product Security Engineer at Boeing focuses on securing operational technology in manufactur...Show more
    Last updated: 1 hour ago • Promoted • New!
    Security Engineer - Redmond, WA (100% onsite)

    Security Engineer - Redmond, WA (100% onsite)

    Georgia IT Inc • Redmond, WA, United States
    Full-time
    Location Redmond, WA (100% onsite).US Citizens and those authorized to work in the U.We are unable to sponsor at this time. STIG Implementation : Apply DOD Security Technical Implementation Guides (S...Show more
    Last updated: 15 hours ago • Promoted • New!
    Senior Platform Security Engineer

    Senior Platform Security Engineer

    Opala • Seattle, WA, US
    Full-time
    Quick Apply
    Opala develops healthcare products that tackle the most complex data challenges faced by payers and providers.As a startup originating from a major healthcare plan in the Northwest, we combine deep...Show more
    Last updated: 3 days ago