Application Security - Vulnerability Discovery

This role strengthens application security by identifying, analyzing and reducing vulnerabilities across modern software. Responsibilities include triaging and validating vulnerabilities from manual reviews, automated tools, bug bounty programs and AI-assisted platforms; partnering with engineering and product teams to drive remediation; reviewing source code and pull requests; improving SDLC practices; building security tooling and automation; configuring and maintaining vulnerability scanning platforms; participating in incident response and on-call rotations. Requirements include 3+ years in application security, familiarity with SAST, DAST, SCA, dependency and IaC scanning, OWASP Top 10, API security, authentication/authorization, secrets management, cryptography, cloud (preferably AWS), and availability to work until 11:00 AM PST. Familiarity with AI-assisted security tools is a plus.