Join WRITER to build application security and AI security foundations for enterprise AI systems and customer-facing AI agents.

Run threat modeling sessions with product teams to ensure security is built into new AI platform features from day one
Design secure architectures for launches, translating security considerations into product decisions
Own and evolve the application security program, including establishing and maintaining SAST/DAST scanning in CI/CD pipelines
Conduct security code reviews for critical changes and build automation to identify vulnerabilities before production
Partner with engineering teams to champion secure coding standards, reusable security patterns, and libraries that enable secure-by-default development
Advise on and recommend security features and products that protect customer environments
Integrate and leverage AI agents to improve velocity for the security team and the wider engineering organization while minimizing risk
Lead security assessments and penetration testing across applications, AI services, and APIs, coordinating remediation at scale
Design and implement security controls for data pipelines, model training environments, and customer-facing AI agents
Research emerging attack vectors in the AI/ML security and LLM threat landscape and proactively build defenses for novel risks

4+ years of hands-on application security engineering with a track record securing large-scale production systems (bonus for fast-growing startups or high-growth environments)
Strong understanding of developer experience and workflows to reduce risk without slowing feature delivery
Technical expertise in at least two programming languages: Python, Java, Go, JavaScript/TypeScript
Ability to read and review code across multiple languages, covering both business logic and security implications
Knowledge of security tools and methodologies including SAST/DAST, vulnerability management platforms, security testing frameworks, and DevSecOps practices
Excellent communication skills to translate complex security concepts for technical and non-technical audiences and drive action
Builder mindset focused on automating, scaling, and empowering teams rather than creating bottlenecks
Alignment with WRITER values: Connect, Challenge, and Own

Generous PTO plus company holidays
Medical, dental, and vision coverage for you and your family
Paid parental leave for all parents (16 weeks)
Fertility and family planning support
Early-detection cancer testing through Galleri
Flexible spending account and dependent FSA options
Health savings account for eligible plans with company contribution
Annual work-life stipends including wellness stipend and learning and development stipend
Company-wide off-sites and team off-sites
Competitive compensation, company stock options, and 401k

Compensation range: USD 183,000 - 240,000 per year

Staff security engineer, application security

Job Description