Senior Application Security Engineer

Stack

Responsibilities

• ▹Participate in security code and system reviews, threat modeling, and risk assessments
• ▹Support the Bug Bounty program: triage, prioritize, and help fix issues
• ▹Collaborate closely with infrastructure security to raise the overall security posture
• ▹Build frameworks and automation that make secure application development the easy default

Requirements

• ▹5+ years in Application Security
• ▹Deep understanding of common security flaws in web and mobile environments and how to address them
• ▹Experience with common security tools (SAST tools, proxies, etc.)
• ▹Experience identifying security issues through code review
• ▹Familiarity with emerging AI security risks (MCP, prompt injection) and building guardrails for agentic development

Nice to have

• ▹Experience securing mobile SDKs (iOS/Android) and backend services (Python)

Soft skills

About the company

RevenueCat removes the headaches of building and scaling in-app subscriptions. Since graduating from YC's S18 batch it has grown into the default monetization platform for mobile, present in over 40% of newly shipped subscription apps and processing $12B+ in annual purchase volume. The remote-first team of 150+ spans 25+ countries.