Application Security Engineer Jobs in San Francisco, CA
Application Security Engineer jobs in San Francisco are in high demand, concentrated in SoMa, the Financial District, and Mission Bay across fintech, enterprise software, and cybersecurity firms. Employers hiring right now include Abridge, ALTRUIST, and Zeta Global. See the openings below and apply to the ones that match your experience.
Find JobsOverview
Showing 5 of 43+ Application Security Engineer jobs
About Altruist
Altruist is transforming the multi-trillion dollar wealth management industry by building an AI platform for wealth professionals. We partner with financial advisors nationwide, empowering them to grow, optimize time and resources, and deliver superior outcomes for their clients.
We're looking for exceptional talent to help us achieve our mission of making financial advice better, more affordable, and accessible to all. If you're passionate about challenging the status quo and want to do the most important work of your life, we'd love to meet you!
But first, our values
Kindness - Kindness doesn't just equal niceness. We listen to understand. We embrace, and encourage healthy debate and diverse perspectives. We approach conflict openly, honestly, and respectfully.
Brilliance - Humility is the skill we're most proud of and possessing a growth mindset is always top of mind. We take ownership in everything we touch; regularly using our unique superpowers to reach a common goal as a team. We succeed and fail as one.
Grit - When challenges arise, we stay laser focused on achieving our mission and finding a way forward, even when it's hard. We are nimble and maintain a sense of urgency, swiftly adapting to change and overcoming obstacles.
About the position
Altruist is in the midst of an exciting phase and we're excited to hire a Senior Application Security Engineer to join our growing Security team. Your expertise will ensure our products are secure — from design and code through the CI/CD pipeline.
This role follows a hybrid schedule, with three days per week onsite in our San Francisco FiDi or Culver City office.
Your impact
- Educate and train development teams on secure coding practices and emerging security threats.
- Perform technical security assessments and code reviews across our Java/Spring services
- Engage in threat modeling to anticipate potential security threats and develop strategies to mitigate them.
- Assist teams in building libraries, repeatable patterns, and paved-road components that ensure security is a part of every new feature.
- Own and tune SAST, DAST, software composition analysis (SCA), and security tooling in CI/CD pipelines; triage findings and drive them to remediation with clear prioritization.
- Partner with engineering to close service-to-service authentication/authorization gaps and other systemic issues.
- Work with Detection & Response and our offensive security engineers to turn findings into durable detections and prevention.
- Contribute to our secure SDLC standards and developer security guardrails.
What you'll bring
- Experience - 4+ years of experience working as an Application/Product Security Engineer:
- Extensive experience with security assessments, security design reviews, or threat modeling
- Hands-on secure code review (Java/Spring or similar)
- Experience operating SAST/DAST/SCA and secrets-scanning tooling in a CI/CD pipeline
- Strong ability to work independently
- Education - A B.A. / B.S. degree in relevant fields such as Computer Science or Computer Engineering or Information Security or relevant experience
- Technical aptitude - You're technologically savvy and can easily get up to speed on modern tech stacks (i.e., Java, Spring, Terraform, Kubernetes, etc.)
- Ownership - The pride you put into every aspect of your work is unparalleled and undeniable
- Superb communication - Intentional dialogue is a superpower. You listen as well as you share your perspective with others.
- Resilience - We're inspired by your unwavering determination to achieve success, no matter the adversity you face along the way.
- Assurance - Your confidence is brilliant, yet ego-less. You possess a strong knowledge base, the ability to discover the unknown, and are open to differing perspectives.
- Creative problem solving - Identifying the problem is simply not enough. You're instinctually creative with your approach in finding solutions to roadblocks.
Bonus points if you bring
- Experience working in regulated environments (fintech / financial services)
- Experience building AppSec automation or a "paved road" for developers
- Cloud (AWS) and API security experience
- Relevant certifications (e.g., CSSLP, GWAPT, OSCP)
What we bring
Attracting and retaining top-tier talent is a priority. We are proud of the culture we've built and are cognizant of the ever-changing professional landscape. Our dynamic offering of perks and benefits are tailored for you to feel your best while doing your best.
- Stunning, amenity-filled office spaces in Culver City, CA, San Francisco, CA, and Dallas, TX. Our offices are intentionally designed for comfort, collaboration, and productivity.
- Competitive total compensation.
- Premium healthcare, dental, and vision insurance plans (HMO and PPO).
- 401k savings plan with a 4% match and immediate vesting.
- 16 week paid parental leave after one year of employment.
- Professional growth and development opportunities including an employee mobility program and an annual L&D budget allocation for each employee.
- Company perks program (includes discounts on pet insurance, fitness, cell phone plans, and travel, etc.).
- Financial guidance program (includes counseling on navigating debt, tracking personal spend, saving and planning goals, home-purchasing preparedness, etc.).
- One month work from anywhere policy (with the exception of a few countries).
Total compensation includes a competitive benefits package, along with a bonus program for eligible roles. For salaried positions, a salary offer will be determined by a number of factors including experience, skill level, internal pay equity, geographic location, and other relevant business considerations. We review all employee pay and compensation programs regularly to ensure fair, equitable, and competitive pay. At Altruist, we are committed to providing fair, equitable, and competitive compensation by leveraging market data to inform our pay bands. Base salaries will be reviewed at regular intervals throughout the year, typically in conjunction with performance review cycles. By evaluating compensation on a regular basis, we are able to reward high performance and ensure all employees have opportunities for growth.
Don't meet every single requirement? Studies have shown that women and people of color are less likely to apply to jobs unless they meet every single qualification. At Altruist we are dedicated to building a diverse, inclusive, and authentic workplace, so if you're excited about this role, but your past experience doesn't align perfectly with every qualification in the job description, we encourage you to apply anyways. You may be just the right candidate for this or other roles.
About Altruist
Altruist is transforming the multi-trillion dollar wealth management industry by building an AI platform for wealth professionals. We partner with financial advisors nationwide, empowering them to grow, optimize time and resources, and deliver superior outcomes for their clients.
We're looking for exceptional talent to help us achieve our mission of making financial advice better, more affordable, and accessible to all. If you're passionate about challenging the status quo and want to do the most important work of your life, we'd love to meet you!
But first, our values
Kindness - Kindness doesn't just equal niceness. We listen to understand. We embrace, and encourage healthy debate and diverse perspectives. We approach conflict openly, honestly, and respectfully.
Brilliance - Humility is the skill we're most proud of and possessing a growth mindset is always top of mind. We take ownership in everything we touch; regularly using our unique superpowers to reach a common goal as a team. We succeed and fail as one.
Grit - When challenges arise, we stay laser focused on achieving our mission and finding a way forward, even when it's hard. We are nimble and maintain a sense of urgency, swiftly adapting to change and overcoming obstacles.
About the position
Altruist is in the midst of an exciting phase and we're excited to hire a Senior Application Security Engineer to join our growing Security team. Your expertise will ensure our products are secure — from design and code through the CI/CD pipeline.
This role follows a hybrid schedule, with three days per week onsite in our San Francisco FiDi or Culver City office.
Your impact
- Educate and train development teams on secure coding practices and emerging security threats.
- Perform technical security assessments and code reviews across our Java/Spring services
- Engage in threat modeling to anticipate potential security threats and develop strategies to mitigate them.
- Assist teams in building libraries, repeatable patterns, and paved-road components that ensure security is a part of every new feature.
- Own and tune SAST, DAST, software composition analysis (SCA), and security tooling in CI/CD pipelines; triage findings and drive them to remediation with clear prioritization.
- Partner with engineering to close service-to-service authentication/authorization gaps and other systemic issues.
- Work with Detection & Response and our offensive security engineers to turn findings into durable detections and prevention.
- Contribute to our secure SDLC standards and developer security guardrails.
What you'll bring
- Experience - 4+ years of experience working as an Application/Product Security Engineer:
- Extensive experience with security assessments, security design reviews, or threat modeling
- Hands-on secure code review (Java/Spring or similar)
- Experience operating SAST/DAST/SCA and secrets-scanning tooling in a CI/CD pipeline
- Strong ability to work independently
- Education - A B.A. / B.S. degree in relevant fields such as Computer Science or Computer Engineering or Information Security or relevant experience
- Technical aptitude - You're technologically savvy and can easily get up to speed on modern tech stacks (i.e., Java, Spring, Terraform, Kubernetes, etc.)
- Ownership - The pride you put into every aspect of your work is unparalleled and undeniable
- Superb communication - Intentional dialogue is a superpower. You listen as well as you share your perspective with others.
- Resilience - We're inspired by your unwavering determination to achieve success, no matter the adversity you face along the way.
- Assurance - Your confidence is brilliant, yet ego-less. You possess a strong knowledge base, the ability to discover the unknown, and are open to differing perspectives.
- Creative problem solving - Identifying the problem is simply not enough. You're instinctually creative with your approach in finding solutions to roadblocks.
Bonus points if you bring
- Experience working in regulated environments (fintech / financial services)
- Experience building AppSec automation or a "paved road" for developers
- Cloud (AWS) and API security experience
- Relevant certifications (e.g., CSSLP, GWAPT, OSCP)
What we bring
Attracting and retaining top-tier talent is a priority. We are proud of the culture we've built and are cognizant of the ever-changing professional landscape. Our dynamic offering of perks and benefits are tailored for you to feel your best while doing your best.
- Stunning, amenity-filled office spaces in Culver City, CA, San Francisco, CA, and Dallas, TX. Our offices are intentionally designed for comfort, collaboration, and productivity.
- Competitive total compensation.
- Premium healthcare, dental, and vision insurance plans (HMO and PPO).
- 401k savings plan with a 4% match and immediate vesting.
- 16 week paid parental leave after one year of employment.
- Professional growth and development opportunities including an employee mobility program and an annual L&D budget allocation for each employee.
- Company perks program (includes discounts on pet insurance, fitness, cell phone plans, and travel, etc.).
- Financial guidance program (includes counseling on navigating debt, tracking personal spend, saving and planning goals, home-purchasing preparedness, etc.).
- One month work from anywhere policy (with the exception of a few countries).
Total compensation includes a competitive benefits package, along with a bonus program for eligible roles. For salaried positions, a salary offer will be determined by a number of factors including experience, skill level, internal pay equity, geographic location, and other relevant business considerations. We review all employee pay and compensation programs regularly to ensure fair, equitable, and competitive pay. At Altruist, we are committed to providing fair, equitable, and competitive compensation by leveraging market data to inform our pay bands. Base salaries will be reviewed at regular intervals throughout the year, typically in conjunction with performance review cycles. By evaluating compensation on a regular basis, we are able to reward high performance and ensure all employees have opportunities for growth.
Don't meet every single requirement? Studies have shown that women and people of color are less likely to apply to jobs unless they meet every single qualification. At Altruist we are dedicated to building a diverse, inclusive, and authentic workplace, so if you're excited about this role, but your past experience doesn't align perfectly with every qualification in the job description, we encourage you to apply anyways. You may be just the right candidate for this or other roles.
See All 43 Application Security Engineer Jobs in San Francisco
Find roles in San Francisco that match your experience and apply in just a few clicks.
Find JobsApplication Security Engineer Job Market in San Francisco
Who's Hiring
Top Industries Hiring
- Technology & Software13
- Science & Research5
- Insurance3
Application Security Engineer Jobs in San Francisco: Frequently Asked Questions
How do I get an application security engineer job in San Francisco?
Focus on San Francisco's dominant hiring sectors: fintech companies in the Financial District, enterprise software firms in SoMa, and cloud infrastructure businesses in Mission Bay. Hands-on experience with secure development lifecycle practices, penetration testing, or cloud security architecture gives candidates a clear edge here. Certifications like CISSP or OSCP are common expectations among Bay Area employers, and familiarity with DevSecOps pipelines is increasingly a baseline requirement.
Which companies hire application security engineers in San Francisco?
Companies currently hiring application security engineers in San Francisco include Abridge, ALTRUIST, and Zeta Global, per current listings on Migrate Mate as of September 2026. San Francisco's employer mix skews heavily toward high-growth technology companies, fintech platforms, and large financial institutions with significant engineering headcount.
Are there remote application security engineer jobs in San Francisco?
Yes, though application security engineering leans more remote-friendly than many technical roles since much of the work involves code review, threat modeling, and tooling rather than on-site infrastructure access. About 84% of application security engineer openings tied to San Francisco are remote or hybrid as of September 2026. Roles focused on security architecture and code review are the most consistently offered as remote positions by San Francisco employers.
How can I get an application security engineer job in San Francisco with little or no experience?
The most realistic entry path in San Francisco is transitioning from a software engineering or DevOps role into a security-focused position, since many SoMa and Mission Bay tech companies actively hire engineers with development backgrounds and offer internal security team rotations. Entry-level titles like security analyst or junior security engineer at mid-size fintech companies or managed security service providers in the Bay Area are common stepping stones. Building a portfolio of CTF challenges or open-source security tooling contributions gives candidates a concrete edge in local interviews.
Which industries hire the most application security engineers in San Francisco?
The sectors hiring the most application security engineers in San Francisco are Technology & Software, Science & Research, and Insurance, based on current listings on Migrate Mate as of September 2026. San Francisco's concentration of venture-backed technology companies, major financial institutions, and cloud platform providers creates sustained, high-volume demand for application security talent across the city.
Related Jobs in California
See All 43 Application Security Engineer Jobs in San Francisco
Find roles in San Francisco that match your experience and apply in just a few clicks.
Find Jobs