Staff AppSec Engineer

What you'll do

• Lead Wayfinder Frontier AI Services customer engagements from scoping to final technical delivery and presentation.
• Review and triage findings from agentic code scanning pipelines across C, C++, Rust, and Java codebases.
• Validate automated security findings to eliminate noise and ensure actionable results for customers.
• Translate complex technical risks into business impact for both executive and technical stakeholders.
• Author and maintain SAST rule packs while collaborating with engineers to improve the AI scanning engine.
• Provide expert remediation guidance to customer development teams and validate their subsequent fixes.
• Define and refine service line methodologies, engagement playbooks, and scoping templates.
• Mentor senior AppSec engineers and threat hunters to elevate internal technical standards.

What we're looking for

• 7+ years of experience in application security or product security with a strong software development background.
• Expert-level proficiency in at least two of C, C++, Rust, and Java to identify vulnerabilities at the framework level.
• Proven track record of translating complex technical findings into executive-level debriefs through excellent written and verbal communication.
• Experience delivering customer-facing or consulting-style engagements end-to-end in a distributed remote organization.
• Mastery of OWASP Top 10, CWE Top 25, and modern authentication infrastructure including SAML, OAuth, OIDC, and JWT internals.
• Hands-on experience authoring custom static-analysis rules for SAST engines and familiarity with AI-assisted code review workflows.
• Strong threat modeling experience throughout the secure SDLC and fluency with Git-based source control and CI/CD pipelines.
• Working depth in Python or Node.js, reverse engineering of compiled code, and relevant certifications like OSWE or CSSLP (preferred).