← All roles

Application Security Engineer

Whatnot· Engineering
Apply on company site
RemoteFull-timePosted 1w ago

About the role

Whatnot is seeking an Application Security Engineer to protect web and mobile products, partnering with product and engineering teams to identify risks, review code, model threats, and build secure software tooling. Remote (US) with option to work from home or in global hubs; Dublin hub nearby is preferred for onsite collaboration.

Responsibilities

  • Perform security-focused code reviews, identifying vulnerabilities and recommending practical fixes.
  • Partner with product and engineering teams on threat modeling and application security reviews.
  • Help teams reproduce, triage, and address security vulnerabilities in web and mobile applications.
  • Support our bug bounty program by investigating reports and working with teams on remediation.
  • Support the preparation of security releases.
  • Help develop security patterns, processes, and automated tooling that prevent entire classes of security issues.

Qualifications

  • 5 years of relevant experience.
  • "Software development experience in one or more of Python, Elixir, or JavaScript."
  • "The ability to review code for security vulnerabilities and work with engineers to implement effective fixes."
  • "An understanding of application security risks and how to identify them through threat modelling and security reviews."
  • "The ability to investigate, reproduce, and triage web and mobile application vulnerabilities."
  • "Strong communication and collaboration skills, with the ability to explain security risks and recommendations clearly to product and engineering teams."
  • "A practical approach to problem-solving and an interest in building reusable tools and processes that help prevent security issues."

Skills

Required:PythonThreat modelingApplication security reviewsCode review for securityCommunication
Nice to have:ElixirJavaScript

Benefits

  • Flexible Time off Policy and Company-wide Holidays (including spring and winter breaks)
  • Health Insurance options (Medical, Dental, Vision)
  • Work From Home Support
  • Care benefits
  • Retirement; 401k offering for Traditional and Roth accounts in the US (employer match up to 4% of base salary) and Pension plans internationally
  • Monthly allowance to dogfood the app
  • Parental Leave
Last updated Oct 21, 2026. Interested? Apply on the company site.
Whatnot logo

About Whatnot

Whatnot is the largest livestream shopping platform in the U.S.

Whatnot is the largest livestream shopping platform in the U.S., connecting buyers and sellers in real-time across any category – from collectibles like trading cards to comics, fashion, sneakers, and more.

marketplacee-commerce
Company profileWebsite

More open roles at Whatnot