Senior Application Security Engineer

As a Senior Application Security Engineer at Loop, your primary responsibility will be to ensure the security and integrity of our systems and data. This will involve actively collaborating on security projects, identifying and communicating potential risks, and implementing effective security measures.

You will play a key role in maintaining a secure environment by proactively monitoring and remediating vulnerabilities, responding to security incidents, and conducting regular security audits. You will also participate in engineering team activities, share your expertise, and mentor other team members on security best practices.

Furthermore, you will be a strong advocate for security within the organization, promoting a culture of security awareness and continuously looking for opportunities to improve our security posture.

Our Blended Work Environment: At Loop, we’re intentional about the way we work so that we can do our best work. We call this our Blended Working Environment. We work from our HQ in Columbus, OH, or one of our Hub or Secluded locations, and are distributed throughout the United States, select Canadian provinces, and the United Kingdom. For this position, you are welcome to join us no matter where you’re located, within the United States and select Canadian provinces.

Our Tech Stack: While Loop utilizes core technologies, the specific tech stack varies across teams. You might encounter technologies such as Vue.js, Node.js, PHP/Laravel, MySQL, DynamoDB, Docker, Kubernetes, AWS Cloud, Gitlab, and Serverless Framework. The security stack consists of Vanta, Sysdig, Cloudflare, and other vulnerability and scanning solutions. What you’ll do: Participate in security projects, delivering secure and well-documented work. Support SOC2 compliance and Pen Testing initiatives.
Deeply understand how to secure networks, applications, infrastructure, and data. Hands-on expertise in some secure software development lifecycle areas with organizational support needed for others. Provide technical guidance and identify automation opportunities. Utilize monitoring and vulnerability scanning tools to identify security concerns within the production environment and systems, remediate findings, or communicate them to the relevant team for triage. Quickly learn the team's tech stack, security tool ecosystem, and environment. Manage security projects independently, escalating when needed. Meet project deadlines and investigate automation opportunities. Build relationships with engineers. Give actionable security feedback to developers. Lead security discussions. Prioritize security issues based on risk assessments. Own and drive security incident response. Your experience: Minimum of 7 years' combined experience in application development or devops, and security engineering. Experience with PHP/Laravel is a huge plus for us. Solid knowledge of common appsec vulnerabilities and their prevention (e.g., OWASP Top 10, SANS Top 25). Experience in security testing, including code review, SAST, DAST, and vulnerability scanning. Familiarity with incorporating security measures into all phases of software development, from initial concept to final launch including “Shift Left” security. Experience with SIEM, WAF, Risk Management Platforms, SAST/DAST or similar security tools. Deep understanding of cloud security best practices and challenges, with specific expertise in AWS security services and architectures or equivalent. Must be proficient in at least one scripting language (e.g., Python, Bash) to automate security tasks and integrate security tools. Skilled in identifying, evaluating, prioritizing, and monitoring the remediation of security vulnerabilities. Proven experience in handling security incidents, including identification, containment, and remediation. Ability to clearly communicate technical security concepts to both technical and non-technical audiences, and to collaborate effectively with development, operations, and other teams. Ability to analyze security issues, identify root causes, remediate and/or recommend effective solutions. $141,600 - $212,400 a year We know that making decisions about your career and compensation is a huge deal. Because of that, we’re incredibly thoughtful about our compensation strategy. We want you to feel safe and excited, but also comfortable with the compensation package of a startup. We’ve outlined some important information for you here, but please know there’s a lot more to compensation than we can cover in this job posting.

The posted salary range is the base salary for this opportunity. The salary range is subject to change, and may be adjusted in the future.

The actual annual salary paid for this position will be based on several factors, including, but not limited to: your prior experience and skills related to the position, geographic location, company needs, current market demands, and your total compensation goals.

Great humans deserve great benefits. At Loop, you’ll be eligible for benefits such as: medical, dental, and vision insurance, flexible PTO, company holidays, sick & safe leave, parental leave, 401k, monthly wellness benefit, home workstation benefit, phone/internet benefit, and equity.