PrizePicks is seeking a Senior AppSec Engineer to support and optimize application security tooling, lead threat modeling exercises, and perform code-level remediation. The successful candidate will have 3+ years of experience in software development or application security and be proficient in deploying and tuning SAST, DAST, and SCA.
Requirements
- 3+ years of experience in software development, mobile development, or application security
- CI/CD Pipeline Expertise
- Deep knowledge of the OWASP Web Security Testing Guide and/or Mobile Application Security Testing Guide
- Experience conducting Threat Modeling
- Familiarity with the OWASP Top 10 for LLMs
- Experience supporting an Incident Response process
- A deep understanding of how web applications work
Benefits
- Company-subsidized medical, dental, & vision plans
- 401(k) plan with company match
- Annual bonus
- Flexible PTO to encourage a healthy work/life balance
- Generous paid leave programs, including 16-week paid parental leave and disability benefits
- Workplace flexibility and modern work schedules
- Company-wide in-person events and team outings
- Lifestyle enhancement program
- Company equipment provided
- Annual performance reviews with opportunities for growth and career development