Drive a shift-left vulnerability detection program to identify and remediate vulnerabilities earlier in the software development lifecycle (SDLC).
Coordinate with DevOps for application security issues that cross between application and infrastructure layers
Support incident-response for product issues and feed lessons back into code, docs, and process.
What you should have
5 + years in Application / Product Security
Hands-on experience securing web applications and automating AppSec workflows.
Familiarity with DevSecOps practices and container security & patching
Experience with GitHub Actions, Python, TypeScript/JavaScript
Clear, concise communicator who can translate risk for engineers
Nice to have
Experience securing LLM workflows
Experience with NIST Risk Management Framework
Experience with software security at a U.S. defense contractor
Active Security Clearance (or ability to obtain one) and willingness to travel onsite
Benefits
Health, dental, and vision insurance
100% remote - work from anywhere in the US
401k matching
Mental benefits
Flexible work environment - you manage your workday
Pet and child care reimbursement during travel
Unlimited PTO
Compensation
The salary range for this position is $160,000 - $210,000 + equity + 401K match. Within the range, individual pay is determined by experience, relevant education, and/or training.
Vannevar is an equal opportunity employer, and qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender perception or identity, national origin, age, marital status, protected veteran status, or disability status.
We encourage candidates from all backgrounds to apply, even if you don't feel like you're a perfect fit. If you're passionate about contributing to our mission, we'd love to hear from you!
IMPORTANT NOTICE We are committed to protecting the privacy of all applicants. Official emails from the company will come from an @vannevarlabs.com domain. Under no circumstances will a legitimate representative from our company contact you to request passwords, financial information, or other sensitive personal data. Please be vigilant of potential scams.
