Senior Application Security Engineer Remote

Senior Application Security Engineer [Remote-US]

remote

To help keep everyone safe, we encourage all applicants to pay close attention to protect themselves during their job search. When applying for a position online you are at risk of being targeted by malicious actors looking for personal data. Please be aware we will only reach out via email using the domain  Anything that does not match those domains should be ignored and considered a security risk.

Quanata is on a mission to help ensure a better world through context-based insurance solutions. We are an exceptional, customer-centered team with a passion for creating innovative technologies, digital products, and brands. We blend some of the best Silicon Valley talent and cutting-edge thinking with the long-term backing of leading insurer, State Farm.

Learn more about us and our work at

From data scientists and actuaries to engineers, designers and marketers, we’re a world class team of tech-minded professionals from some of the best companies in Silicon Valley, and around the world. We’ve come together to create the context-based insurance solutions and experiences of the future. We know that the key to our success isn't just about nailing the technology—it’s hiring the talented people who will help us continue to make a quantifiable impact.

As a Senior Application Security Engineer, you will serve as the primary partner for web and backend engineering teams, helping embed security best practices throughout the software development lifecycle. You will support secure design, conduct threat modeling, review backend and frontend code, and lead integration of security tools into developer workflows. Your role bridges frontend and API security, and you'll be responsible for helping developers resolve complex security challenges across product surfaces.

• Partner with one product portfolio to facilitate overall product security management, emphasis on AI/ML-specific security concerns and cross-functional work with data science teams
• Perform security design reviews and threat modeling on APIs, web features, and service integrations, including integrating SAST, SCA, and DAST tools into CI/CD pipelines
• Support secure development practices across security champions and engineering
• Review source code and deployment configurations for security vulnerabilities
• Collaborate with developers to triage, fix, and validate vulnerability findings
• Participate in cross-functional incident response and remediation planning
• Draft and maintain App Sec guidance for engineering teams and security champions
• Contribute to security awareness and enablement across the engineering org
• Develop App Sec related integrations and deployments of automation solutions (ASVS scanning, burpsuite enterprise)
• Support application security integration reviews, saas security assessments, oss reviews

• Bachelor’s degree or equivalent relevant experience
• 6 - 8 years of experience in application security or full-stack development with security expertise
• Familiar with application risk and vulnerabilities (OWASP Top 10, API Security, SSRF, etc.)
• Experience with code scanning tools (e.g., CodeQL, Semgrep, Sonar Qube, Snyk)
• Comfortable reading and debugging complex codebases across the stack
• Clear and thoughtful communicator with the ability to guide engineers at all levels
• Experience with Graph
  
  QL security
• Participation in security champions programs or secure SDLC rollouts
• Contributions to open-source security tooling
• Familiarity with infrastructure-as-code and container security

Salary: $220,000 to $350,000*

* Please note that the final salary offered will be determined based on the selected candidate's skills, and experience, as well as the internal salary structure  aim is to offer a competitive and equitable compensation package that reflects the candidate's expertise and contributions to our organization.

• Benefits
  :
  We provide a wide variety of health, wellness and other benefits. These include medical, dental, vision, life insurance and supplemental income plans for you and your dependents, a Headspace app subscription, monthly wellness allowance and a 401(k) Plan with a company…