← All roles

Staff Application and AI Security Engineer

Savvy Wealth· EPD
Apply on company site
Hybrid (NYC Office)$220k - $250kFull-timePosted 3mo ago

About the role

Senior Application Security Engineer at Savvy Wealth, the first dedicated security hire. Hands-on, technical security role focused on vulnerability management, secure AI-enabled development, cloud/SaaS security, and cross-functional collaboration with Engineering, IT, and AI teams.

Responsibilities

  • Own vulnerability management end to end: identify, triage, prioritize by real-world risk, and drive remediation to closure across our product, codebases, and cloud infrastructure (AWS, GCP, Cloudflare)
  • Build and operate our AppSec tooling pipeline: secrets scanning in CI and at the git layer, SCA/dependency scanning with triage SLAs, and SAST rollout on our most sensitive repos, tuned for signal over noise
  • Set and enforce security hygiene standards within our codebases, including code review standards that explicitly account for AI-generated code (authorship transparency, mandatory human review on security-sensitive paths)
  • Partner with our internal AI team to design guardrails that keep AI-assisted development safe by default: sanctioned tooling, data handling boundaries, dependency vetting, and secure defaults for AI-built integrations
  • Secure the SaaS stack: harden configurations, review OAuth grants and third-party integrations, reduce misconfiguration risk across platforms like Google Workspace, GitHub, Rippling, and Slack
  • Help establish conditional access and identity-layer controls in partnership with IT (SSO, phishing-resistant MFA, managed-device posture)
  • Define cloud and SaaS configuration baselines for the infrastructure footprint we operate
  • Contribute to detection and response readiness: high-signal detections and incident response participation when needed
  • Work cross-functionally with Engineering, IT, and the internal AI team; clearly articulate risk, remediation paths, and tradeoffs to both technical and non-technical stakeholders

Qualifications

  • 5+ years of hands-on security engineering experience, with significant time in application security or product security
  • Strong software engineering fundamentals; comfortable reading, writing, and remediating code
  • Track record of enforcing security across technical and non-technical teams without slowing anyone down
  • Experience embedding security into existing workflows rather than bolting it on
  • Deep experience with the modern AppSec toolchain: secrets scanning, SCA/dependency scanning, SAST, and CI/CD security integration (GitHub-centric)
  • Practical experience securing SaaS environments: OAuth and third-party app review, configuration hardening, and least-privilege access design
  • Working knowledge of cloud security across AWS and/or GCP, and edge/CDN security (Cloudflare)
  • Pragmatic, risk-based mindset; ability to ship iteratively
  • Strong perspective on AI-assisted development security and guardrails
  • Excellent communication and independent work capability in a fast-paced environment
  • Strong writing skills; Savvy is a written culture

Skills

Required:Vulnerability managementAppSec toolingCode review for AI-generated codeCloud securityOAuth / third-party security
Nice to have:Incident response

Benefits

  • Competitive salary and equity package
  • Relocation package to NYC office
  • Unlimited PTO + paid company holidays
  • Holistic medical, dental, and vision plans
  • Company 401(k) with Mega backdoor Roth options, Commuter, and HSA/FSA plans
  • NYC office in Union Square
  • Lunch and snacks; dinner if staying late
  • Access to virtual mental health care (Spring Health) and health concierge (Rightway)
  • Counseling for stress management, dependent care, nutrition, fitness, legal, and financial issues (Guardian WorkLifeMatters EAP)
Last updated Oct 14, 2026. Interested? Apply on the company site.

About Savvy Wealth

Experience Wealth Management, Redefined.

Savvy combines technology with real-world financial expertise to offer you more freedom and peace of mind.

wealth managementfinancial adviceinvestment managementretirement planningestate planningtax strategy
Company profileWebsite

More open roles at Savvy Wealth