← All roles

Application Security Engineer

Hark· Privacy & Security
Apply on company site
San Jose, CA$150k - $300kfull-timePosted 2w ago

About the role

Hands-on security role focused on owning the security of Hark's software across backend services, mobile apps, and third-party integrations. Develops guardrails for rapid but safe engineering, and defines best practices for securing LLM and agent systems.

Responsibilities

  • Threat-model new features and services, with a focus on agent/LLM attack surfaces (prompt injection, tool misuse, data exfiltration, cross-tenant access)
  • Review code and designs for backend services (Go), APIs, and mobile apps; fix vulnerabilities directly when faster than filing a ticket
  • Secure authentication, authorization, and session handling across the consumer product, including OAuth integrations with third-party platforms
  • Build and tune SAST, dependency, and secrets scanning in CI so findings are high-signal and developers actually act on them
  • Triage and remediate findings from pentests and vulnerability disclosure program
  • Partner with engineering to embed security into the development lifecycle through paved roads, secure defaults, and reusable libraries

Qualifications

  • 4–8 years of hands-on application or product security engineering experience
  • Strong software engineering skills; production code capability (Go strongly preferred; Python, TypeScript, Swift, or Kotlin also valuable)
  • Deep understanding of web and API vulnerability classes (OWASP Top 10, SSRF, IDOR/BOLA, authz flaws, injection) and how to fix them at the root
  • Hands-on experience with OAuth 2.0 / OIDC, session management, and securing multi-tenant systems
  • Experience running secure code review and threat modeling in a fast-moving engineering org
  • Experience turning scanner and runtime findings into fixes using tools like Wiz Code, Wiz Cloud, and Datadog SIEM (or equivalent SAST/SCA, CNAPP, and SIEM tools)
  • Real curiosity about LLM and agent security; this is new territory and we want someone excited to figure it out.

Skills

Required:Threat modelingCode review and secure codingGoOAuth 2.0 / OIDCSAST / SCA / CNAPP / SIEM tooling
Last updated Oct 8, 2026. Interested? Apply on the company site.
Hark logo

About Hark

building the most advanced personal intelligence in the world.

At Hark, we are building the most advanced personal intelligence in the world.

personal intelligenceartificial intelligence
Company profileWebsite

More open roles at Hark