# Application Security Engineer (X Money)

**Company**: SpaceXAI
**Location**: Palo Alto, CA
**Work arrangement**: hybrid
**Experience**: senior
**Job type**: full-time
**Salary**: $100,000 - $258,000 USD
**Category**: IT
**Industry**: Technology

**Apply**: https://job-boards.greenhouse.io/xai/jobs/5253534007?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/jobs/job_24ede367-e03

## Description

SpaceXAI is seeking an innovative Application Security Engineer to join 𝕏 Money. You will protect the security and integrity of payments and financial products throughout the software development lifecycle, focusing on code security, CI/CD pipelines, and systems handling customer funds.

## Responsibilities:

- Conduct in-depth code reviews and static analysis to identify security vulnerabilities in financial applications.

- Design and implement secure coding guidelines and best practices for development teams.

- Collaborate with development teams to integrate security practices into CI/CD pipelines.

- Perform threat modeling and risk assessments for payments, wallets, ledgers, and related product surfaces.

- Manage vulnerability tracking and remediation efforts.

- Oversee the bug bounty program, including intake, triage, and researcher communication.

- Support incident response activities related to application security.

- Stay updated on emerging threats and continuously strengthen controls.

- Evaluate and secure software supply chains, including producing Software Bills of Materials (SBOMs).

- Design and implement agentic and LLM-based solutions to detect, investigate, or prevent security problems.

## Basic Qualifications:

- Bachelor's degree in Computer Science, Cybersecurity, or a related field.

- 3-5 years of experience in application security with a focus on code security practices.

- Experience in payments, money transmission, digital wallets, or related financial platforms.

- Strong understanding of secure coding practices, application security frameworks, and common vulnerabilities.

- Proficiency in Python or Rust with experience in secure coding practices.

- Experience securing CI/CD pipelines and implementing DevSecOps practices.

- Familiarity with software supply chain security and SBOM generation tools.

- Experience with security testing tools and static/dynamic code analysis.

- Excellent communication skills.

## Preferred Skills and Experience:

- Hands-on experience securing applications on AWS.

- Relevant security certifications.

- Experience managing bug bounty programs.

- Background in data privacy and compliance relevant to financial products.

- Experience with GitOps and infrastructure-as-code security.

- Experience building custom security tooling.

- Contributions to open-source security projects.

## Compensation and Benefits:

The salary range is $100,000 - $258,000 USD. The total rewards package at SpaceXAI includes equity, comprehensive medical, vision, and dental coverage, access to a 401(k) retirement plan, and various other discounts and perks.

## Skills

### Required
- application security
- code security
- CI/CD pipelines
- secure coding practices
- Python
- Rust
- DevSecOps
- software supply chain security
- SBOM generation
- security testing tools
- static code analysis
- dynamic code analysis
- threat modeling
- risk assessments
- bug bounty program management
- incident response

### Nice to have
- AWS
- security certifications
- GitOps
- infrastructure-as-code security
- custom security tooling
- open-source security projects

---

Source: [Apply at job-boards.greenhouse.io](https://job-boards.greenhouse.io/xai/jobs/5253534007?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)