Senior Application Security Engineer

Monarch Money
United States, Canada
Workplace: RemoteFull timeUSD 180,000 - 215,000 annuallyFunction: CybersecuritySkills: ["Curiosity","Fluency"]

Join the Security Engineering team as a hands-on Senior Application Security Engineer, embedded across product and engineering to keep Monarch’s application layer secure. You’ll lead application security reviews (threat modeling, code review, risk assessment), run and improve SAST/DAST and vulnerability management in CI/CD, and coordinate penetration testing for web and API surfaces. The role also advances AI/LLM security review processes and builds security automations and tooling while participating in an on-call rotation.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Monarch Money
Monarch Money
2 months ago

Senior Application Security Engineer

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 19 hours agoStatus: Live

Job Summary

Join the Security Engineering team as a hands-on Senior Application Security Engineer, embedded across product and engineering to keep Monarch’s application layer secure. You’ll lead application security reviews (threat modeling, code review, risk assessment), run and improve SAST/DAST and vulnerability management in CI/CD, and coordinate penetration testing for web and API surfaces. The role also advances AI/LLM security review processes and builds security automations and tooling while participating in an on-call rotation.
Location: United States, Canada
Workplace: Remote
Employment Type: Full time
Job Function: Cybersecurity
Seniority: Sr. Manager level

Key Responsibilities

  • •Conduct application security reviews including threat modeling, code review, and risk assessment for new features and major product changes across Monarch’s Django/Python stack.
  • •Perform and improve SAST/DAST operations, including triage, validation, and remediation tracking in CI/CD pipelines.
  • •Manage and execute on the vulnerability backlog with urgency, including triage criteria, remediation tracking, and escalation paths with engineering squads.
  • •Coordinate penetration testing and security assessments for Monarch’s web and API surfaces.
  • •Apply and improve AI security review processes for LLM-integrated and agentic features (prompt injection, data leakage, model abuse, supply chain risk) and build security automations and AI-powered tooling, participating in weekly on-call rotation.

Pay and Benefits

Salary: USD 180,000 - 215,000 annually
Equity and Bonus:Equity
Perks:Health InsuranceDentalVision401kPaid Leave

Key Requirements

  • •5+ years in security engineering with demonstrated depth in application and AI security, including threat modeling, SAST/DAST, secure code review, and vulnerability management.
  • •Proficiency in Python and strong understanding of web application security, including OWASP Top 10, API security, and auth/authz patterns.
  • •Hands-on experience with application security tooling such as Semgrep, Burp Suite, Nuclei, or equivalents.
  • •Familiarity with AI/ML security risks including prompt injection, model abuse, agentic attack surfaces, or LLM supply chain risk.
  • •Demonstrated AI fluency, actively using AI tools to accelerate security work and build automation.
Experience:Fintech
Skills:CuriosityFluency
Certifications:OSCPBSCPCSSLPCISSP
Tech Stack:PythonDjangoCI/CDSASTDASTSemgrepBurp SuiteNucleiOWASP Top 10API securityAuth/authzLLMPrompt injectionLLM supply chain riskAWSIAMECSEKSCI/CD pipelines

Company Brief

Monarch Money
Monarch Money is a subscription-based personal finance platform that consolidates bank accounts, cards, investments, and loans into a single interface to help users budget, track net worth, and reach financial goals.
Industry: Wealth Management
Company Size: Medium (51 to 250 employees)
Growth: Growth Stage Startup
Valuation: USD 500M to 1B
Funding: Series B
Headquarters: San Francisco, United States
Founded: 2018
Glassdoor
Glassdoor: 5.0
WebsiteLinkedInGlassdoor