← All roles

Senior Application Security Engineer

Sardine· Security and IT
Apply on company site
RemoteFull-timePosted 5d ago

About the role

Senior-level role focusing on building and operating an automated vulnerability management pipeline, eliminating root causes of security bugs, and enabling secure software across a multi-cloud, Kubernetes-based environment for Sardine’s risk and payment platform.

Responsibilities

  • Triage, validate, route, and drive remediation of findings from SAST, DAST, SCA, code review, pentests, and bug bounty
  • Build automation to remove manual effort from vulnerability management steps
  • Oversee external pentests and bug bounty scope, testing, severity judgment, and closing the loop
  • Identify patterns across findings to remove root causes and codify secure defaults and patterns
  • Write custom static analysis rules to prevent class-level regressions
  • Review platform-layer controls (authorization, service identity, secrets handling, gateway enforcement) and drive closure of gaps
  • Collaborate with engineers to implement fixes that are simple, adopted, and durable
  • Hands-on testing of applications and APIs, with emphasis on authorization and business logic
  • Threat modeling on new/high-exposure designs
  • Support security enablement across engineering, including a security champions program

Qualifications

  • Vulnerability management, automated, with end-to-end experience
  • Engineering background with real software shipping
  • Ownership mindset to drive problems to resolution across teams
  • Judgment-focused approach over tenure
  • Code auditing in Go, Python, Node.js, Ruby, or Java, plus willingness to work in others
  • Practical understanding of OWASP Top 10, with depth in broken access control and business logic flaws
  • Experience with SAST, DAST, SCA in CI/CD; cloud fundamentals on GCP or AWS; Docker and Kubernetes
  • Ability to distinguish real findings from theoretical ones
  • Strong evidence-based, open disagreement and asynchronous influence across time zones

Skills

Required:Vulnerability management (automated)Engineering backgroundCode auditingOWASP Top 10CI/CD security (SAST/DAST/SCA)Cloud fundamentals (GCP/AWS)Docker & KubernetesThreat modelingSecurity enablement

Benefits

  • Generous compensation in cash and equity
  • Early exercise for all options, including pre-vested
  • Remote-first culture (work from anywhere within country of hire)
  • Flexible paid time off and year-end break
  • Health insurance, dental, and vision for employees and dependents (US and Canada)
  • 4% 401k/RRSP matching (US and Canada)
  • MacBook Pro delivered to your door
  • One-time home office setup stipend
  • Monthly meal stipend
  • Monthly social meet-up stipend
  • Annual health and wellness stipend
  • Annual Learning stipend
Last updated Oct 22, 2026. Interested? Apply on the company site.

About Sardine

The AI risk platform for fraud, credit, and compliance

Sardine’s AI platform is at the core of enterprise risk and fraud workflows, allowing them to consolidate vendors and improve operational efficiency. Hundreds of enterprises in over 70 countries trust Sardine to stop fraud in real-time, streamline BSA/AML compliance, and unify data across risk teams.

fraud preventionKYC/AMLTransaction monitoringBot detectionScams and ATOCard issuing fraudAML MonitoringCustomer dashboard
Company profileWebsite

More open roles at Sardine