← All roles

Lead Application Security Engineer

Panthalassa· Business Operations
Apply on company site
Portland, OR$200k - $260k + equityfull-timePosted 2w ago

About the role

Lead role responsible for advancing Panthalassa’s application security capabilities, partnering with the Director of Information Security and software engineering teams, and shaping the AppSec function within a hands-on, collaborative environment.

Responsibilities

  • Assist the Head of Information Security with building out the AppSec function at Panthalassa.
  • Conduct code and service architecture reviews to provide security guidance.
  • Lead engineers in threat modelling applications and services.
  • Work with the Head of Information Security to define culturally useful software security metrics.
  • Assist in interviewing and onboarding of other Security personnel.
  • Assist with incident response and handling now while we grow, and provide escalation support for incidents later as we have grown.
  • Integrate, maintain, and automate security scanning tools (SAST, DAST, SCA, and secrets management) directly into our CI/CD pipelines.
  • Build and integrate agentic security tools for Panthalassa needs.
  • Conduct hands-on threat modeling and architectural design reviews for new features and applications before code is written.
  • Perform manual and automated secure code reviews as well as targeted penetration testing on web and mobile applications.
  • Help manage the company’s external Vulnerability Disclosure or Bug Bounty programs and translate regulatory compliance requirements into practical engineering tasks.

Qualifications

  • 6+ years of experience with Application Security processes.
  • 2+ years of experience as a Team Lead or Manager of an Application Security team.
  • Broad in general and deep in places Application Security foundational knowledge.
  • Experience with using AI systems and agents for security outcomes in a professional capacity.
  • Deep understanding of the OWASP Top 10, CWE Top 25, and secure design patterns.
  • Hands-on experience with industry-standard security tools (e.g. Snyk, GitHub Advanced Security, Burp Suite, Fortify).
  • Bachelor’s degree in Computer Science, Cybersecurity, or equivalent practical experience.

Skills

Required:Application SecurityTeam Leadership / People ManagementThreat ModelingSecure Code ReviewSecurity Tooling & CI/CDOWASP Top 10 / CWE Top 25AI for Security
Nice to have:Cloud Platforms & Infra Tools

Benefits

  • Flexible paid time off
  • Health insurance (the company pays 100% of gold-level PPO plan for full-time employees, their partners, and dependents)
  • Dental insurance (the company pays 100% for full-time employees, their partners, and dependents)
  • Vision insurance (the company pays 100% for full-time employees, their partners, and dependents)
  • Disability insurance (the company pays 100% for a policy to provide long-term financial support if you become disabled)
  • Ability to contribute to tax-advantaged accounts, including 401(k), health FSA, and dependent care FSA
  • Relocation assistance to facilitate your move to Portland (if needed)
Last updated Oct 12, 2026. Interested? Apply on the company site.
Panthalassa logo

About Panthalassa

Go where the energy is

We're harnessing renewable energy in the open ocean and delivering it around the world. Engineered in Portland, Oregon.

Planetary-scale energyclean energy platformrenewable energyocean energypilot deploymentpublic-benefit corporation
Company profileWebsite

More open roles at Panthalassa