below marketmost similar roles pay hereabove market
This role pays more than
98%
of similar roles. Most pay
$159,000–$219,131
— the blue band above.
At the midpoint, this role pays about
$270k
versus about
$189k
for comparable roles.
Based on 240 similar postings.
Employer
About Brex
Brex is a financial technology company providing corporate credit cards, cash management accounts, and expense management software designed specifically for startups and growing technology companies. Industry: Financial Technology & Corporate Banking
Brex currently has
83 open roles
on FindRole.
Listed pay typically runs
$192,000–$240,000
across 79 roles with salary data.
The Staff Application Security Engineer joins the Security team to lead the technical vision and strategic roadmap for application security. This role involves establishing technical standards and secure defaults across the engineering organization while architecting and securing novel AI/ML and agentic workflows. Key responsibilities include mentoring engineers, driving proactive vulnerability discovery, and executing complex attack chains to demonstrate business impact. The position requires expertise in securing agentic architectures, LLM gateways, and evaluating adversarial AI vectors. Candidates must possess deep knowledge of cloud-native container security using AWS and Kubernetes. Technical proficiency in Python and Go is required to build internal tooling and pipeline automation. The role focuses on securing core primitives, APIs, and microservices within a high-velocity engineering environment.
Lead the technical vision and strategic roadmap for the Application Security team.
Establish technical standards and secure defaults across the entire engineering organization.
Architect and secure novel AI/ML and agentic workflows against risks like prompt injection.
Mentor and coach engineers to improve their security expertise and accelerate team delivery.
Drive proactive vulnerability discovery and execute complex attack chains to prioritize remediation.
Partner with infrastructure and data teams to ensure APIs and microservices are secure by design.
What we're looking for
8+ years of experience in Application Security, Product Security, or software engineering with a focus on offensive and defensive application security.
Proven track record of technical leadership and team mentorship on complex, multi-quarter security engineering initiatives in fast-paced environments.
Deep proficiency and technical expertise in AI security, including securing agentic architectures, LLM gateways, and evaluating adversarial AI vectors.
Extensive experience defining secure product development lifecycles, threat modeling complex topologies, and cloud-native container security (AWS, Kubernetes).
Proficiency in Python, Go, or similar languages to architect internal tooling, pipeline automation, and advanced detection/scanning engines.
Exceptional written and verbal communication skills with the ability to navigate ambiguity and influence technical leaders.
Experience with Kotlin, gRPC, GraphQL, or Kubernetes (preferred).
Experience building and scaling security teams, securing distributed systems in AWS, or contributing to the wider technical community (preferred).