Application Security Engineer (X Money)

SpaceXAI is seeking a skilled and innovative Application Security Engineer to join 𝕏 Money. In this role, you will protect the security and integrity of payments and financial products throughout the software development lifecycle, focusing on code security, CI/CD pipelines, and systems handling customer funds.

Responsibilities:

• Conduct in-depth code reviews and static analysis to identify and mitigate security vulnerabilities in financial applications.
• Design and implement secure coding guidelines and best practices for development teams.
• Collaborate with development teams to integrate security practices throughout the CI/CD pipeline.
• Perform threat modeling and risk assessments for payments, wallets, ledgers, and related product surfaces, developing mitigation strategies for fraud, abuse, and unauthorized fund movements.
• Manage vulnerability tracking and remediation efforts, providing guidance to development teams.
• Manage the bug bounty program, including intake, triage, researcher communication, and coordinated disclosure.
• Support incident response activities related to application security.
• Stay current on emerging threats against financial and cloud-native systems, continuously strengthening controls.
• Evaluate and secure software supply chains, including producing and maintaining Software Bills of Materials (SBOMs).
• Design and implement agentic and LLM-based solutions to detect, investigate, or prevent security problems.

Basic Qualifications:

• Bachelor's degree in Computer Science, Cybersecurity, or a related field.
• 3-5 years of experience in application security, with a strong focus on code security practices.
• Experience in payments, money transmission, digital wallets, or related financial platforms.
• Deep understanding of secure coding practices, application security frameworks, and common vulnerabilities (e.g., OWASP Top 10).
• Proficiency in Python or Rust and experience with secure coding practices in these languages.
• Experience securing CI/CD pipelines and implementing DevSecOps practices.
• Familiarity with software supply chain security and SBOM generation tools.
• Experience with security testing tools (e.g., Burp Suite, OWASP ZAP) and static/dynamic code analysis.
• Experience securing payments, wallets, ledgers, or other high-value transaction systems, including controls against fraud, abuse, and integrity issues.
• Experience designing and implementing agentic and LLM-based solutions for security problems.
• Excellent communication skills, able to explain complex security issues to both technical and non-technical audiences.

Preferred Skills and Experience:

• Hands-on experience securing applications on AWS; familiarity with other cloud platforms is a plus.
• Relevant security certifications (e.g., BSCP, OSCP, OSWE).
• Experience managing bug bounty programs.
• Background in data privacy and compliance relevant to financial products and cloud-native applications.
• Experience with GitOps and infrastructure-as-code security.
• Experience building custom security tooling to enhance and automate security processes.
• Contributions to open-source security projects or tools.

Compensation and Benefits:

$100,000 - $258,000 USD

Base salary is just one part of our total rewards package at SpaceXAI, which also includes equity, comprehensive medical, vision, and dental coverage, access to a 401(k) retirement plan, short & long-term disability insurance, life insurance, and various other discounts and perks.