About Accelerant Accelerant is a data-driven risk exchange connecting underwriters of specialty insurance risk with risk capital providers.
About the role
• Own and improve application security practices across web applications, APIs, services, and CI/CD pipelines. • Manage the external penetration testing program, including planning, scoping, scheduling, vendor engagement, communications, findings review, remediation tracking, and retesting. Found on 1752vc Careers, the job board for startup and VC roles.
What they're looking for
- 5+ years of experience in application security, product security, DevSecOps, or a related discipline
- Strong understanding of web application and API security, authentication, authorization, sessions, common attack patterns, and the OWASP Top 10
- Experience managing external penetration testing or similar third-party security assessment programs
- Experience with vulnerability management and security-scanning tools such as Snyk, Qualys, Trivy, Dependabot, GitHub Advanced Security, or equivalent platforms
- Experience integrating security controls into CI/CD pipelines and development workflows
- Experience with WAF policy management, API security, virtual patching, filtering, rate limiting, and application perimeter protection
More about this role
The Senior Application Security Engineer is a hands-on role within Production Engineering, responsible for improving the security of Accelerant's applications, APIs, cloud services, and software delivery practices.
The role combines application security engineering, vulnerability management, penetration testing, security automation, application perimeter protection, and close partnership with development squads.
A key responsibility will be turning security findings into completed remediation. The successful candidate will work directly with development squads to prioritize and close Critical and High vulnerabilities, using proactive processes and security AI agents to improve triage, exploitability analysis, remediation guidance, and verification.
• Own and improve application security practices across web applications, APIs, services, and CI/CD pipelines.
• Manage the external penetration testing program, including planning, scoping, scheduling, vendor engagement, communications, findings review, remediation tracking, and retesting.
• Broker the relationship between development teams and third-party penetration testing providers to ensure clear expectations, effective testing,...
Browse similar: AI jobs · AI startup jobs · Startup jobs · Remote jobs