{"schemaVersion":"jobsearcher.job.v1","id":"f1eb26f82b4e7d7ff62cdb0d","url":"https://jobsearcher.com/jobs/f1eb26f82b4e7d7ff62cdb0d","canonicalUrl":"https://jobsearcher.com/jobs/f1eb26f82b4e7d7ff62cdb0d","title":"Staff Application Security Engineer","description":"Staff/Principal Application Security EngineerA mission-driven Series B SaaS company is hiring a Staff/Principal Application Security Engineer to own application security across a platform that holds highly sensitive PII and PHI for public sector agencies. You'll live in the codebase, building security controls at the application runtime and database layer and using frontier AI tooling to find and fix bugs at scale. You'll report to the CTO, work alongside a small senior security team, and have a path toward a hands-on CISO seat.Compensation: $240K-$330K base plus stock optionsLogistics: RemoteHere's what you'll be doing:Build and ship enterprise-grade security controls in the application runtime and database layer, including row-level data encryptionFind and fix vulnerabilities at scale through code audits, threat modeling, penetration testing and agentic AI pipelinesSet secure coding standards and security direction across the SDLC, the product and the cloud environmentPartner with the platform team on IAM and the permissions framework, layering application controls on topLead AppSec incident response with on-call engineers and write the post-incident analysesStand up a pre-launch security review process, a vendor-run bug bounty and intake for security researcher reportsSecure file upload and download flows and harden PII and PHI handlingIntegrate application logging and alerting with the SIEMSupport SOC 2 Type II, HIPAA and FedRAMP controls and evidence collectionMentor developers, shape security hiring plans and represent security to leadershipAnd what you need to have:Staff or principal level AppSec or product security experience at a product companyCurrently writing production code and comfortable in any language; Ruby, Python or Java a plusA track record of security controls you built at the application runtime or database layerHands-on experience implementing row-level data encryptionStrong full-stack, cloud and scalable architecture backgroundDeep web application security knowledge across OWASP Top 10 vulnerability classesFluency with AI-assisted security tooling and frontier modelsThe ability to explain risk and tradeoffs to engineers, executives and non-technical stakeholdersPlus: offensive security consulting, fintech, healthtech or HIPAA, GovTech or FedRAMPNo CTC or sponsorship at this time.","company":"Hampton North","rawCompany":"hampton north","city":"Denver","state":"CO","isRemote":false,"isActive":false,"createdAt":"2026-11-11T07:52:28.923Z","occupations":[{"code":"15-1299.05","title":"Information Security Engineers","slug":"information-security-engineers"},{"code":"15-1212.00","title":"Information Security Analysts","slug":"information-security-analysts"},{"code":"15-1252.00","title":"Software Developers","slug":"software-developers"}],"industries":[{"code":"541512","title":"Computer Systems Design Services","slug":"computer-systems-design-services"},{"code":"541511","title":"Custom Computer Programming Services","slug":"custom-computer-programming-services"},{"code":"513210","title":"Software Publishers","slug":"software-publishers"}],"jobPosting":{"@context":"https://schema.org","@type":"JobPosting","title":"Staff Application Security Engineer","description":"Staff/Principal Application Security EngineerA mission-driven Series B SaaS company is hiring a Staff/Principal Application Security Engineer to own application security across a platform that holds highly sensitive PII and PHI for public sector agencies. You'll live in the codebase, building security controls at the application runtime and database layer and using frontier AI tooling to find and fix bugs at scale. You'll report to the CTO, work alongside a small senior security team, and have a path toward a hands-on CISO seat.Compensation: $240K-$330K base plus stock optionsLogistics: RemoteHere's what you'll be doing:Build and ship enterprise-grade security controls in the application runtime and database layer, including row-level data encryptionFind and fix vulnerabilities at scale through code audits, threat modeling, penetration testing and agentic AI pipelinesSet secure coding standards and security direction across the SDLC, the product and the cloud environmentPartner with the platform team on IAM and the permissions framework, layering application controls on topLead AppSec incident response with on-call engineers and write the post-incident analysesStand up a pre-launch security review process, a vendor-run bug bounty and intake for security researcher reportsSecure file upload and download flows and harden PII and PHI handlingIntegrate application logging and alerting with the SIEMSupport SOC 2 Type II, HIPAA and FedRAMP controls and evidence collectionMentor developers, shape security hiring plans and represent security to leadershipAnd what you need to have:Staff or principal level AppSec or product security experience at a product companyCurrently writing production code and comfortable in any language; Ruby, Python or Java a plusA track record of security controls you built at the application runtime or database layerHands-on experience implementing row-level data encryptionStrong full-stack, cloud and scalable architecture backgroundDeep web application security knowledge across OWASP Top 10 vulnerability classesFluency with AI-assisted security tooling and frontier modelsThe ability to explain risk and tradeoffs to engineers, executives and non-technical stakeholdersPlus: offensive security consulting, fintech, healthtech or HIPAA, GovTech or FedRAMPNo CTC or sponsorship at this time.","datePosted":"2026-11-11T07:52:28.923Z","dateModified":"2026-11-11T07:52:28.923Z","hiringOrganization":{"@type":"Organization","name":"Hampton North","sameAs":"https://jobsearcher.com"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Denver","addressRegion":"CO","addressCountry":"US"}},"identifier":{"@type":"PropertyValue","name":"JobSearcher","value":"f1eb26f82b4e7d7ff62cdb0d"},"url":"https://jobsearcher.com/jobs/f1eb26f82b4e7d7ff62cdb0d"}}