Senior Application Security Engineer at Hippo Insurance

What you'll do

• Serve as a senior subject matter expert in application security, providing authoritative guidance.
• Identify and assess application-centric security risks across code, CI/CD pipelines, identity systems, and cloud environments.
• Independently own and drive resolution of complex application security challenges with broad organizational impact.
• Apply threat modeling and adversarial thinking to inform defensive improvements and strengthen application resilience.
• Mentor engineers and security partners, elevating application security maturity by embedding secure design principles.

What we're looking for

• 6+ years of experience in application security or product security roles.
• Strong understanding and hands-on experience with CIAM, authentication protocols (OAuth2, OIDC, SAML, JWT).
• Proven track record of improving application security outcomes across multiple teams and systems.
• Deep expertise securing web applications, APIs, distributed systems, WAFs, and customer identity platforms.
• Solid understanding of cloud-native architectures and CI/CD pipelines from an application risk perspective.
• Experience designing or maintaining automated security tooling (SAST, DAST, SCA, secrets detection).
• Proficiency in one or more modern programming languages.