gem
Application Security Engineer
Retool
San Francisco, USA
Full-time
Senior · 5+ years experience
Onsite
USD 231900-318250 yearly / year
Discovered 1 weeks ago
TypeScriptPythonStatic analysisLinters
Free
Job Fit Check
Base Career helps you apply smarter for this job.
?%
Ready to ScanKey skills for this role
TypeScriptPythonStatic analysis
Key Skills for This Role
TypeScriptPythonStatic analysisLinters
Full Job Posting
- Identify systemic security gaps in our codebase and engineering workflows, and work with engineering teams to design and ship durable solutions; you’ll drive solutions, not just surface problems
- Build security tooling, automation, and code-level controls that address classes of vulnerabilities, including custom linters, static analysis rules, and automated checks, shifting the cost of catching issues left rather than handling them one at a time or after they’ve reached production
- Conduct in-depth code reviews and security design reviews for significant product initiatives, with the technical depth to engage meaningfully with architectural tradeoffs rather than just flag issues for others to resolve
- Drive threat modeling and security assessments for new features, and translate security requirements into practical engineering guidance that developers can actually act on
- Contribute to the team’s evolving approach to security as AI-assisted development scales internally, including how faster and higher-volume code production changes how we find, prioritize, and fix risks
- Triage, track, and drive remediation of vulnerabilities with product engineering teams, and contribute to our penetration testing and bug bounty programs
- 5+ years of hands-on experience in application security and security engineering: you’ve built things, not only assessed them, and your background is not mainly consulting, audit, or compliance work
- The ability to operate independently with good judgment in a fast-moving environment: you prioritize well by understanding the needs of the business and our shared objectives, make calls with incomplete information, and know when to move fast versus when to slow down and get it right, or escalate and ask for help
- Communication that earns trust: you can make security legible to engineers without being preachy, and you measure your impact by how well you’ve supported the business, not by how many issues you catalogued
- A track record of shipping security tooling or automation that improved things for more than one team
- Genuine engineering depth: you can read, reason about, and review code at the level needed to find real bugs and understand their root causes, not just pattern-match to a checklist
- Comfort working in TypeScript and Python: Retool’s platform is built in TypeScript and our security tooling leans on Python, you’ll need to be productive in both and not just conversant
Apply for this job in 1 click
Skip the repetitive application forms
Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.
Trusted by over 500,000 job seekers on Base Career
More from this employer
More jobs at Retool
Associate Sales Engineer
San Francisco, USA
Discovered 2 days agoFull-time
Associate Support Engineer - San Francisco
San Francisco, USA
Discovered 2 days agoFull-time
Associate Support Engineer - New York
New York City, USA
Discovered 2 days agoFull-time
Software Engineer
San Francisco, USA
Discovered 1 weeks agoFull-time
Software Engineer, Core Services
San Francisco, USA
Discovered 1 weeks agoFull-time
Software Engineer, Core Infrastructure
San Francisco, USA
Discovered 1 weeks agoFull-time
Software Engineer, Apps Builder Experience
San Francisco, USA
Discovered 1 weeks agoFull-time
Software Engineer, Resources
San Francisco, USA
Discovered 1 weeks agoFull-time