Application Security Engineer

Join WRITER, a leading AI platform, as an Application Security Engineer. In this role, you'll build the security foundations that protect our AI systems, work at the intersection of application security and AI infrastructure, and partner with engineering teams to embed security into every line of code. You'll have the opportunity to define how enterprise AI applications are secured, tackle unique challenges in AI security, and lead security assessments and penetration testing. Enjoy a range of benefits, including flexible location and schedule options, competitive parental leave policy, company stock options, and more.

• Concevoir et recommander des fonctionnalités et des produits de sécurité pour aider à sécuriser les environnements des clients.
• Diriger les évaluations de sécurité et les tests de pénétration des applications, des services d'IA et des API de WRITER.
• Construire la sécurité dans l'ADN de notre plateforme d'IA en menant des sessions de modélisation des menaces avec les équipes produit.
• Technical expertise in at least two programming languages (Python, Java, Go, JavaScript/TypeScript) and the ability to read and review code across multiple languages, understanding both business logic and security implications
• 4+ years of hands-on experience in application security engineering, with a proven track record of securing large-scale production systems—bonus points if you've worked in fast-growing startups or high-growth environments
• Understanding of developer experience and developer workflows for shipping features and products. You care deeply about reducing risk while considering velocity of engineers
• Alignment with WRITER's values of Connect (building strong relationships across teams), Challenge (pushing the boundaries of what's possible in AI security), and Own (taking end-to-end responsibility for the security of our platform)
• Knowledge of security tools and methodologies including SAST/DAST solutions, vulnerability management platforms, security testing frameworks, and DevSecOps practices—you know which tools to use and when automation beats manual review
• Excellent communication skills that allow you to translate complex security concepts into clear recommendations for both technical and non-technical audiences—you can explain why something matters and motivate teams to action
• A builder's mindset that looks for opportunities to automate, scale, and empower rather than create bottlenecks—you understand that security enables the business, not blocks it