Apply

Ready to go for it?

AI Apply speeds things up—apply directly if you prefer.

FREE ACCESS
5,000–10,000 jobs/day
Scoutfield Logo

See all jobs on Scoutfield

Search thousands of fresh jobs every day.

Discover
  • Fresh listings
  • Fast filters
  • No subscription required
Create a free account and start exploring right away.
Sardine

Senior Application Security Engineer

Sardine

. Triage, validate, route, and drive remediation of findings from SAST, DAST, SCA, code review, pentests, and bug bounty .

Posted 10/15/2026full-timeRemote • United StatesSenior💰 $135,000 - $180,000 per yearWebsite

Core Competencies

Role fit
Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in vulnerability management, including automation and remediation processes, while ensuring secure coding practices and compliance with security standards. Proficient in application and API security testing, threat modeling, and collaboration with engineering teams to enhance security measures.

Highest-signal resume keywords
Vulnerability Management AutomationCode Auditing in Go, Python, Node.js, Ruby, or JavaSAST, DAST, and SCA in CI/CDCloud Fundamentals on GCP or AWSAdvanced Offensive Certifications (OSWE, BSCP, CPTS, CRTO)

ATS Keywords

Tailor your resume
Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills
Vulnerability ManagementStatic Application Security Testing (SAST)Dynamic Application Security Testing (DAST)Software Composition Analysis (SCA)Code ReviewThreat ModelingApplication Security TestingCustom Static Analysis RulesRoot Cause AnalysisSecurity Patterns and Defaults
Soft Skills
CollaborationInfluencing Across Time ZonesOwnership of ProblemsCritical ThinkingCommunication
Tools & Technologies
DockerKubernetesGCPAWSTicketing APIsSource-Control APIs
Certifications & Qualifications
OSWEBSCPCPTSCRTO
Industry Keywords
OWASP Top 10Bug Bounty ProgramsPentestingSecurity Champions ProgramAuthorization ControlsService IdentitySecrets HandlingGateway Enforcement

Tech Stack

Tools & technologies
AWSCloudDockerGoogle Cloud PlatformJavaJavaScriptKubernetesNode.jsPythonRubyGo

About the role

Key responsibilities & impact
  • Triage, validate, route, and drive remediation of findings from SAST, DAST, SCA, code review, pentests, and bug bounty
  • Build automation to remove manual effort from vulnerability-management workflows
  • Set scope for external pentests and bug bounty programs, direct testers, judge severity, and close the loop
  • Identify patterns across findings and remove root causes
  • Establish secure patterns and defaults
  • Write custom static analysis rules for organizational anti-patterns
  • Review platform-layer controls including authorization, service identity, secrets handling, and gateway enforcement
  • Collaborate with owning engineering teams to close security gaps
  • Perform hands-on application and API testing and manual code review of high-exposure services
  • Conduct threat modeling for new and high-exposure designs
  • Provide security enablement across engineering, including a security champions program

Requirements

What you’ll need
  • Experience running vulnerability management end to end, and automating it with code against scanner, ticketing, and source-control APIs
  • Shipped and maintained real software; able to read unfamiliar code quickly, review it rigorously, and reason about architecture and failure modes
  • Ownership of problems through remediation, including fixes dependent on other teams
  • Code auditing in at least one of Go, Python, Node.js, Ruby, or Java, with willingness to work in the rest
  • Practical command of the OWASP Top 10, with real depth in broken access control and business logic flaws
  • Experience with SAST, DAST, and SCA in CI/CD
  • Cloud fundamentals on GCP or AWS
  • Docker and Kubernetes
  • Ability to distinguish real findings from theoretical ones
  • Ability to influence asynchronously across time zones without a reporting line
  • Advanced offensive certifications such as OSWE, BSCP, CPTS, or CRTO are a bonus

Benefits

Comp & perks
  • Generous compensation in cash and equity
  • Early exercise for all options, including pre-vested
  • Work from anywhere: Remote-first Culture
  • Flexible paid time off and Year-end break
  • Health insurance, dental, and vision coverage for employees and dependents - US and Canada specific
  • 4% matching in 401k / RRSP - US and Canada specific
  • MacBook Pro delivered to your door
  • One-time stipend to set up a home office — desk, chair, screen, etc.
  • Monthly meal stipend
  • Monthly social meet-up stipend
  • Annual health and wellness stipend
  • Annual Learning stipend