Sr. Application Security Engineer

Sorry, this job was removed at 10:09 p.m. (CST) on Friday, Sep 19, 2025
5 Locations
In-Office or Remote
62K-173K Annually
Fintech • Machine Learning • Social Impact • Software • Financial Services
TrueML is a fintech company building software to create positive experiences for consumers seeking financial health.
The Role
Why TrueML?
 
TrueML is a mission-driven financial software company that aims to create better customer experiences for distressed borrowers. Consumers today want personal, digital-first experiences that align with their lifestyles, especially when it comes to managing finances. TrueML’s approach uses machine learning to engage each customer digitally and adjust strategies in real time in response to their interactions.
 
The TrueML team includes inspired data scientists, financial services industry experts and customer experience fanatics building technology to serve people in a way that recognizes their unique needs and preferences as human beings and endeavoring toward ensuring nobody gets locked out of the financial system.

Your Role:

We are seeking a talented and motivated Senior Application Security Engineer with a strong background in AWS and DevOps practices. In this role, you will be responsible for ensuring the security of our applications throughout the development lifecycle. You will work closely with engineering teams to identify and mitigate security vulnerabilities, implement security best practices, and contribute to the organization's overall security strategy. The ideal candidate will have excellent communication skills and the ability to collaborate effectively with cross-functional teams.

Benefits & Perks

  • Everything you need to work remotely
  • Unlimited PTO
  • Medical/dental/vision insurance
  • 401k through Charles Schwab 
  • Flexible Spending Account, Limited FSA, and Health Savings Account- with an eligible health care package. 
  • Company-paid short-term and long-term disability plus basic life insurance.
  • Family-friendly maternity and paternity leave
  • Employee assistance program (EAP) via Claremont. Get free short-term counseling for mental health, free + discounted legal consultations, free financial consultations, access to work/life consultants, and more!
  • PerkSpot discount program. PerkSpot offers exclusive discounts to 900+ merchants nationwide, and has exclusive discounts up to 60% on hotels worldwide.
  • Paid time off to do volunteer work in your community.
  • Access to the Wellness Coach app for you and 5 family members

Key Responsibilities:

  • Security Integration: Work with development and DevOps teams to integrate security into the software development lifecycle (SDLC). 
  • Vulnerability Management: Identify, assess, and mitigate security vulnerabilities in applications, infrastructure, and cloud environments. 
  • AWS Security: Implement and maintain security controls in AWS, including IAM policies, security groups, VPC configurations, and monitoring. 
  • DevOps Security: Collaborate with DevOps teams to incorporate security best practices in CI/CD pipelines, including automated testing, secure code reviews, and infrastructure as code (IaC) security. 
  • Threat Modeling: Conduct threat modeling and risk assessments to identify potential security threats and develop mitigation strategies.
  • Incident Response: Assist in developing and executing incident response plans, including identifying and responding to security incidents. 
  • Compliance & Best Practices: Ensure that all systems and applications comply with relevant security standards, regulations, and best practices (e.g., OWASP, NIST, ISO 27001). 
  • Security Training: Provide security training and guidance to engineering teams to promote secure coding and infrastructure management practices.
  • Continuous Improvement: Continuously monitor, evaluate, and improve security practices, tools, and processes.

Qualifications

  • Education: 
  • Bachelor’s degree in Computer Science, Information Security, or a related field, or equivalent experience. • 8+ years of experience in application security or a related role. 
  • Strong experience with AWS security services and best practices. 
  • Experience with DevOps tools and practices, including CI/CD pipelines, containerization, and IaC. 

  • Technical Skills: 
  • Proficiency in at least one programming language (e.g., Python, Go). 
  • Strong understanding of web application security (e.g., OWASP Top Ten) and secure coding practices. 
  • Familiarity with security tools and technologies such as SAST, DAST, SIEM, and WAFs. 

  • Soft Skills:
  • Excellent verbal and written communication skills. 
  • Strong problem-solving skills and attention to detail. 
  • Ability to work well in a team environment and collaborate effectively with engineers, developers, and other stakeholders. 

  • Preferred Qualifications: 
  • AWS Certified Security – Specialty or similar certification. 
  • Experience with container security (e.g., Docker, Kubernetes). 
  • Familiarity with modern authentication and authorization protocols (e.g., OAuth, SAML, JWT). 
  • Knowledge of secure coding frameworks and libraries. 

We are a dynamic group of people who are subject matter experts with a passion for change. Our teams are crafting solutions to big problems every day. If you’re looking for an opportunity to do impactful work, join TrueML and make a difference.
 
Our Dedication to Diversity & Inclusion
 
TrueML and TrueAccord are equal opportunity employers. We promote, value, and thrive with a diverse & inclusive team. Different perspectives contribute to better solutions and this makes us stronger every day. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.

For California Applicants: we collect personal information for employment purposes. We do not sell personal information. Most of the information we have is provided to us by you and/or collected as part of the employment process. For more details on how we use, share, and delete personal information see our Privacy Policy.

What the Team is Saying

Isaac
Christina
Emilia
Nadav
Candace
Noelle

Similar Jobs

TrueML Logo TrueML

Security Engineer

Fintech • Machine Learning • Payments • Social Impact • Software • Financial Services
In-Office or Remote
4 Locations
450 Employees
23K-33K Annually

TrueML Logo TrueML

Senior Full-stack Engineer

Fintech • Machine Learning • Payments • Social Impact • Software • Financial Services
In-Office or Remote
3 Locations
450 Employees
62K-74K Annually
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.

The Company
450 Employees
Year Founded: 2013

What We Do

TrueML makes financial technology that prioritizes customer experience and revolutionizes the experience of consumers seeking financial health. We’re a team of inspired data scientists, financial services industry experts, and customer experience fanatics creating experiences that serve people in a way that recognizes their unique needs and preferences as human beings and endeavoring to ensure nobody gets locked out of the financial system.

After more than 10 years in business, TrueML is excited to be expanding its footprint internationally. We are a growing, geographically diverse team with employees in 30 U.S. states and 7 different countries, with our key talent hub in LATAM. If you’re looking for an opportunity to do impactful work, join TrueML and make a difference alongside hundreds of other inspired individuals.

Why Work With Us

Our functional teams are a diverse mix of employees from different backgrounds and geographies, with each individual bringing unique perspectives and experiences that encourage increased innovation in our products and services. Join TrueML and make a difference alongside hundreds of other inspired individuals doing impactful work.

Gallery

Gallery
Gallery
Gallery
Gallery
Gallery
Gallery
Gallery
Gallery
Gallery
Gallery

TrueML Offices

Remote Workspace

Employees work remotely.

TrueML is excited to be a remote-first company and expanding its footprint internationally. We are a growing, geographically diverse team with employees in 30 U.S. states and 7 different countries, with our key talent hub in LATAM.

Typical time on-site: None
Dominican Republic (Remote Hub)
US
Argentina (Remote Hub)
Mexico (Remote Hub)
San Francisco, CA
Costa Rica (Remote Hub)
Learn more

Sign up now Access later

Create Free Account

Please log in or sign up to report this job.

Create Free Account