Startups

Application Security Engineer

Very Good Security · United States · Remote

← All jobs
About Very Good Security

Integrate VGS into your technology stack to streamline payment tokenization, with our comprehensive card management platform, network token solutions, account updater, and card attribute management tools. Backed by a16z.

About the role

As an Application Security Engineer, you will partner directly across Security and Engineering to build a friction-free, developer-centric security program. You will shape our Secure SDLC, automate security guardrails in our CI/CD pipelines, scale our private bug bounty program, and foster a strong culture of security champions across a globally distributed team. Found on 1752vc Careers, the job board for startup and VC roles.

What they're looking for

  • AppSec Experience: 3–5+ years of dedicated experience in Application Security and/or full stack development, with proven experience
  • Technical Depth: Practical background conducting secure code assessments for Java and Python applications
  • Tooling & Automation: Deep familiarity integrating SAST/DAST tools (e.g., GitHub Advanced Security, ZAP/BURP, Synopsys/Veracode, Semgrep and similar tools) into modern CI/CD systems
  • Vulnerability & Program Management: Hands-on experience operating bug bounty programs and setting program metrics/KPIs
  • Threat Modeling: Practical experience applying frameworks like STRIDE to complex systems
  • Collaborative Mindset: Exceptional communication skills with a track record of building trust across engineering teams
More about this role

VGS is building the trust infrastructure for a new era of commerce. As commerce becomes agentic, payments are increasing dramatically in volume, speed, and complexity, and the companies driving that shift need a foundation they can fully trust.

That's where VGS comes in. We're the world's leader in payment tokenization, trusted by the most innovative AI and Fortune 500 companies, merchants, banks, and fintechs to power modern payments and agentic commerce. We store more than 9 billion tokens and process more than 10 billion monthly interactions, touching a third of all e-commerce. That scale isn't incidental. It's why leading companies embed our universal token vault and credential management platform directly into their stack, taming the complexity of payment data so they can move faster.

Come build the platform that enables modern payments for the world's largest companies. We're helping businesses unlock new possibilities in an industry that never stops moving. And that takes exceptional people.

As an Application Security Engineer, you will partner directly across Security and Engineering to build a friction-free, developer-centric security program. You will shape our Secure...

Read the full posting on Very Good Security's site ↗

Security & Compliance

Build your edge while you search

Free tools for founders and investors, plus VC Unfiltered, our take on startups, venture and the people who build them.