Senior Application Security Engineer

About the role

Brex provides a financial platform used by companies like Coinbase and Robinhood to manage spending and banking operations. This role focuses on identifying platform vulnerabilities and securing new AI-driven financial features. You will work within the Financial Scale organization to protect complex systems and improve security workflows.

Key facts

What you'll do

• Detect security flaws and demonstrate their business impact to help prioritize remediation efforts.
• Conduct penetration testing and design reviews to ensure new product features are built securely.
• Develop and maintain internal tools for SAST and DAST automation and secure development support.
• Promote a culture of security through mentorship, technical leadership, and internal training sessions.
• Secure AI implementations and agentic workflows against emerging attack vectors.

Requirements

• 5+ years of professional experience in Application Security or a related field.
• Proven ability to uncover vulnerabilities in complex environments and create custom exploits.
• Background in threat modeling, incident response, and developer education.
• Proficiency in Python and scripting languages to build automation tools.
• Strong communication skills and a collaborative approach to working across different engineering teams.

Nice to have

• Experience as a software engineer.
• Proficiency with Kotlin, gRPC, GraphQL, and Kubernetes.
• Background in cloud security, specifically within AWS distributed systems.
• Experience securing agentic AI features.
• History of consultancy work in web application security.
• Participation in bug bounty programs or responsible disclosure.
• Public contributions to the security community, such as research, open source, or CVEs.

Skills & tools

• Python
• Kotlin
• gRPC
• GraphQL
• Kubernetes
• AWS
• SAST/DAST tools
• Threat modeling

Practical notes

Salary range: $192,000 - $240,000 base pay, plus equity and additional compensation. Final offers are determined by location, skills, and experience. Brex is a subsidiary of Capital One, N.A. Only communicate with recruiters using a brex.com email domain to avoid potential phishing attempts.