Senior Application Security Engineer

At Handshake, we believe security should be built into the product, not layered on after the fact. We're looking for a Senior Application Security Engineer who’s excited to shape how security shows up in the developer experience, and enable our engineering teams to ship secure code without compromising on velocity.

About the Role

As a Senior Application Security Engineer, you'll play a critical role in protecting Handshake’s users and their data. You'll work closely with our engineering, platform, and cloud teams to make the secure way the easy way and embed security directly into how software gets designed, written, and shipped.

This role is on our Cloud Security squad on our Infra & Platform team and is an engineering forward role. You’ll be building systems, tools, and automation that make secure development the default. You’ll bring a modern, opinionated perspective on how application security should work in a cloud-native, AI-enabled environment.

What You'll Do

Own and grow key areas of our Secure Software Development Lifecycle (SDLC) like threat modeling, security reviews, and vulnerability management.
Work collaboratively with and be a trusted partner for engineering teams.
Eliminate whole classes of vulnerabilities by building secure by default libraries and tools into our platform.
Raise the bar for security awareness by teaching others and sharing your knowledge
Design and build developer facing tooling to help engineers identify and fix security issues before they make it to production.
Scale your impact and security knowledge by teaching others, automating processes, and leveraging AI and agentic tooling.
Balance security and speed by using your judgement and expertise to add the right amount of security to our SDLC.
Help respond to potential security incidents as a member of the security on-call rotation.

What We're Looking For

A builder mindset and experience working on large codebases and safely shipping code to production.
Strong understanding of common application security risks (OWASP Top 10) and how to mitigate them.
A pragmatic and empathetic approach to security controls that favors guidance over blocking and influence over mandates.
Strong communication skills and the ability to communicate security risks and tradeoffs to both technical and non-technical audiences.
Experience with threat modeling and risk assessments.
Familiarity with securing and running software in a major cloud provider.
Curiosity and a desire to use AI and agenting tooling to scale your and the security team’s impact.

Nice to Haves

Experience working in Google Cloud (GCP)
Experience writing production code in the most popular languages at Handshake: Ruby, Typescript and Go.
Experience building agentic systems to solve security problems.

Why This Role

You’ll have real ownership over how application security is built and scaled at Handshake. This role sits at the intersection of security, developer experience, and AI, with the opportunity to define how all three come together. As part of a fast paced and growing business you will regularly get to work on new and interesting problems.

If you care about building systems (not just processes), enjoy working closely with engineers, and want to rethink what modern application security looks like, we’d love to hear from you.

Perks

Handshake delivers benefits that help you feel supported—and thrive at work and in life.
The below benefits are for full-time US employees.

🎯 Ownership: Equity in a fast-growing company
💰 Financial Wellness: 401(k) match, competitive compensation, financial coaching
🍼 Family Support: Paid parental leave, fertility benefits, parental coaching
💝 Wellbeing: Medical, dental, and vision, mental health support, wellness stipend
📚 Growth: Learning stipend, ongoing development
💻 Remote & Office: Internet, commuting, and free lunch/gym in our SF office
🏝 Time Off: Flexible PTO, 15 holidays + 2 flex days
🤝 Connection: Team outings & referral bonuses

Explore our mission, values, and comprehensive US benefits at joinhandshake.com/careers.

Senior Engineer, Application Security