Application Security Engineer (Remote)

Remote, Oregon (United States) Amaro Talent is recruiting an Application Security Engineer for our client, a fast-growing, venture-backed cybersecurity company whose platform helps organizations build and monitor their security programs and meet compliance frameworks such as SOC 2 and ISO 27001. About the role This is a hands-on, product-focused engineering role for someone with real security depth. You will own how security scanning results are filtered, prioritized and presented to customers, so that what they see is accurate, relevant and easy to act on rather than noisy. You will work alongside backend and full-stack engineers, product managers and designers, and you will be the main security voice in product and architecture decisions. You will also talk directly with customer security teams and use their feedback to improve the product quickly. What you'll do - Integrate, configure and maintain the security tools behind the platform, and own the quality of their output - Cut false positives and noise: decide which findings to show, hide or enrich - Design detection rules, severity scoring and triage workflows that make findings actionable - Build context-aware prioritization and exploitability analysis on top of the underlying tools - Work with engineering on how findings and remediation steps appear in the product UI - Bring security expertise to roadmap planning with product and design - Review architecture decisions that affect security - Meet with customers to learn how they use the product and what slows adoption - Compare output quality against competing products and close the gaps - Contribute fixes and improvements to the open-source security tools the product relies on, where it makes sense What you'll bring - 5+ years in application security, including substantial time building and shipping security products - Strong coding skills in Go, Python or TypeScript (this is product engineering, not a security operations role) - Hands-on experience tuning security tools for production: false-positive reduction, suppression logic, severity models - Solid knowledge of vulnerability research, CVE/CWE classifications and exploitability analysis - A clear sense of the difference between a finding that is technically correct and one that is actually useful - Strong communication skills and comfort working with customers - A pragmatic approach: you build fast and keep things simple - Experience in a fast-paced startup engineering environment Nice to have - Experience shipping a product at a security vendor - Open-source security tooling contributions - Offensive security background or OSCP or similar certification - Hands-on work with LLM agents, tool use or autonomous AI systems Benefits - Competitive base salary plus equity - Comprehensive health and wellness benefits - 20 days PTO plus floating holidays - Fully remote, remote-first culture - Company team off-sites abroad Compensation note: the range above is a US national baseline. Offers vary by location, skills and experience. Candidates in high-cost markets may be offered at or above the top of the range, and candidates in other markets are benchmarked to local pay. Candidates outside the US may be hired directly or through an employer-of-record. US candidates must be authorized to work in the US (E-Verify). Equal opportunity employer. How to apply Apply through this posting or email your resume to with "Application Security Engineer" in the subject line. Amaro Talent is a recruiting firm focused on cybersecurity. Every application is reviewed by a recruiter, and qualified candidates will be contacted for a confidential conversation before anything is shared with the client.