Security Engineer
Assembled· Engineering
New York City, NY, San Francisco, CA$180k - $280kFull-timePosted 4w ago
About the role
Lead application security across Assembled’s SaaS and AI products, shaping security practices, architecture, and tooling within the Engineering organization. Start as the sole dedicated security hire with broad scope to influence product security, risk management, and incident response.
Responsibilities
- Product and application security. Lead threat modeling, secure design reviews, and vulnerability management across our SaaS and AI products and the underlying infrastructure.
- Tooling and automation. Integrate and automate controls for secrets, access, and dependency security within our engineering workflows and CI/CD pipelines.
- Application security testing. Establish and maintain code, dependency, and secrets scanning, alongside dynamic application security testing. Partner with third-party penetration testers and manage external vulnerability reporting and triage.
- Secure practices. Develop secure design and coding training for engineers. Establish clear processes for routing security issues to engineering owners and following through on fixes.
- Incident response. Respond to security incidents involving application vulnerabilities, coordinating remediation efforts and post-incident improvements.
- Partner on security assurance. Bring technical depth to customer security conversations and partner with Finance/Ops on the technical side of SOC 2 and assurance work. Turn recurring customer needs into better product and engineering decisions.
- Shape the team and roadmap. You’ll start as our sole dedicated security hire. You’ll set a foundation for how the security function should evolve, including where we hire or bring in outside expertise.
Qualifications
- Security engineering expertise. You have 3+ years of hands-on application security experience, including threat modeling, security code reviews, and vulnerability remediation.
- Strong software engineering fundamentals. You have experience writing and reviewing production code, and knowing when to work alongside the engineer closest to the system.
- See the whole picture. You understand that helping us succeed responsibly means finding ways to build and ship while taking real risks seriously. Engineers trust you to find a path forward and help turn ambitious ideas into products customers can trust.
- AI-pilled. You actively use AI tools for security investigation, testing, or remediation and can evaluate their limitations. You have a point of view on how this changes the product threat model and how the security role evolves.
Skills
Required:Application securityThreat modelingSecure coding practicesVulnerability management
Benefits
- Stock options are provided as part of the compensation package, in addition to a full range of medical, financial, and/or other benefits, dependent on the position offered.
Last updated Sep 23, 2026. Interested? Apply on the company site.
About Assembled
Pivoted to TenXList, a professional network of top college engineers.
educationrecruiting
More open roles at Assembled
- Enterprise Sales Development Representative (SDR)1w agoSan Francisco, CA, New York City, NY · Sales
- Enterprise Sales Development Representative (SDR)1w agoNew York City, NY, San Francisco, CA · Sales
- Strategic Customer Success Manager3w agoSan Francisco, CA, New York City, NY · Customer
- Customer Success Manager3w agoSan Francisco, CA, New York City, NY · Customer
- Software Engineer, Workforce Operations1mo agoSan Francisco, CA · Engineering