SpaceXSI is seeking an Application Security Engineer to help safeguard payments and financial products across the software development lifecycle. This onsite role in Austin, TX emphasizes secure code, hardening CI/CD pipelines, and turning threat intelligence into practical controls, including LLM and agentic approaches for security detection and prevention.

What you’ll do

Perform deep code reviews and static analysis to find and remediate security vulnerabilities in financial applications.
Define and implement secure coding guidelines and best practices for development teams.
Partner with engineering teams to embed security practices throughout the CI/CD pipeline.
Lead threat modeling and risk assessments for payments, wallets, ledgers, and related product surfaces, including mitigations for fraud, abuse, and unauthorized movement of funds or credits.
Own vulnerability tracking and remediation workflows, providing guidance to development teams.
Manage the bug bounty program, including intake, triage, researcher communication, and coordinated disclosure.
Support application security incident response activities.
Monitor emerging threats targeting financial and cloud-native systems and continuously improve controls.
Assess and secure software supply chains, including producing and maintaining Software Bills of Materials (SBOMs).
Design and build agentic and LLM-based solutions to detect, investigate, or prevent security problems.

Requirements

Bachelor’s degree in Computer Science, Cybersecurity, or a related field.
3 to 5 years of experience in application security, with a strong focus on code security practices.
Experience in payments, money transmission, digital wallets, or related financial platforms.
Strong understanding of secure coding, application security frameworks, and common vulnerabilities such as OWASP Top 10.
Proficiency in Python or Rust and experience applying secure coding practices in those languages.
Experience securing CI/CD pipelines and implementing DevSecOps practices.
Familiarity with software supply chain security and SBOM generation tools.
Experience with security testing tools such as Burp Suite and OWASP ZAP, plus static and dynamic code analysis.
Experience securing high-value transaction systems such as payments, wallets, and ledgers, including controls to address fraud, abuse, and integrity issues.
Experience designing and implementing agentic and LLM-based solutions for security problems.
Excellent communication skills, with the ability to explain complex security issues to both technical and non-technical audiences.

Technologies you’ll work with

Python, Rust
CI/CD pipelines, DevSecOps
OWASP Top 10
Burp Suite, OWASP ZAP
Software Bills of Materials (SBOMs)
LLM-based solutions, agentic solutions
AWS

Compensation and benefits

Salary: USD 100,000 - 258,000 per year
Equity
Comprehensive medical, vision, and dental coverage
Access to a 401(k) retirement plan
Short and long-term disability insurance
Life insurance
Various other discounts and perks

Preferred skills and experience

Hands-on experience securing applications on AWS; familiarity with other cloud platforms is a plus.
Relevant security certifications (e.g., BSCP, OSCP, OSWE).
Experience managing bug bounty programs.
Background in data privacy and compliance relevant to financial products and cloud-native applications.
Experience with GitOps and infrastructure-as-code security.
Experience building custom security tooling to enhance and automate security processes.
Contributions to open-source security projects or tools.

ITAR requirements

To conform to U.S. Government export regulations, applicant must be a (i) U.S. citizen or national, (ii) U.S. lawful, permanent resident (aka green card holder), (iii) Refugee under 8 U.S.C. § 1157, or (iv) Asylee under 8 U.S.C. § 1158, or be eligible to obtain the required authorizations from the U.S. Department of State.

Application Security Engineer