Remote Staff Application Engineer Jobs
Remote Staff Application Engineer jobs are open at remote-first firms and distributed teams across the U.S., with strong demand in sectors like enterprise software, cloud infrastructure, and industrial technology. Employers hiring remotely right now include Mozilla Corporation, Reltio, and Trimedx. See the openings below and apply to the ones that match your experience.
Find JobsOverview
Showing 5 of 11+ Remote Staff Application Engineer jobs
Please Note: This is a remote position available in the state listed on this job. Additionally, employment with BambooHR is contingent on passing both a background and credit check.
AI at BambooHR
At BambooHR, we believe in leveraging cutting-edge technology to empower people and transform HR. We're actively integrating AI into our solutions and workflows to enhance efficiency and drive innovation. To that end, we're looking to our existing team members and future hires to share this forward-thinking mindset: individuals who are curious about AI's potential, eager to learn and adapt, and ready to explore how intelligent tools can elevate their work along with BambooHR's impact on setting people free to do great work. Join us in reimagining the future of HR!
Essential Job Duties
AI is becoming part of how BambooHR's platform works, from features we build to agents that connect through open protocols. As a Staff Application Security Engineer, you will set the review bar and standards for agentic systems and architect the agents our security team uses to scale its work. This is a hands-on, organization-level role for someone who thrives in ambiguity and gets results through knowledge, influence, and collaboration.
You will:
- Lead security reviews and threat models of AI features and agentic systems — including autonomous agents, MCP servers, and third-party integrations — and keep review playbooks and quality criteria current
- Set BambooHR's security standards for AI agents, covering identity and delegated authorization, tenant- and user-scoped data access, safe handling of tool output, tool supply chain, and human-approval requirements, and track adoption as threats evolve
- Own the design of agents the security team uses for finding validation, triage, review assistance, and remediation — building and shipping them with clear evaluation criteria, bounded permissions, and human approval gates for high-impact actions
- Help developers and security champions build and use agents safely through self-serve guidance and tooling, and advocate for the partner-team investment that work requires
- Work with engineering and product leadership to embed security requirements into the SDLC, including design-time and release-time gates for AI features, and make agent-assisted code review, finding validation, and fix suggestions a default part of every team's CI/CD pipeline with clear blocking criteria and a fast exception path
- Run security programs that span multiple teams and quarters — setting goals, milestones, and success metrics; maintaining a lightweight intake, prioritization, and retrospective cadence; coordinating dependencies across engineering, product, and operations; and reporting progress, risks, and tradeoffs to leadership
- Represent AppSec in architecture forums, harmonize security requirements to reduce duplicated effort across teams, act as a point of escalation, and coach leaders on security tradeoffs
- Partner with Legal, Privacy, and GRC on AI governance to close gaps between policy intent and technical implementation through guardrails and automation, including for emerging AI regulations
- Train and coach software engineers and engineering teams on secure design and threat modeling, with emphasis on authentication, authorization, multi-tenancy, and AI features
- Mentor fellow security engineers on technical direction and career growth, and close skill gaps on the security team through onboarding, training, and mentorship
- Participate in an on-call rotation as needed to support incident response and resolve escalated security issues
What You Need to Get the Job Done
- Bachelor's degree in Computer Science, Information Security, or a related field, or equivalent practical experience
- 8+ years of experience in security, including 5+ years of hands-on experience in application security
- Experience securing multi-tenant SaaS platforms, including tenant isolation
- Cloud and infrastructure security experience (e.g., AWS, Azure, GCP)
- Hands-on experience building AI agents or agentic workflows, with concrete examples of how you handled permissions, failures, and validation — production systems, internal tools, personal or open-source projects, and substantial prototypes all count
- Demonstrated ability to evaluate the security of AI and agentic systems, including prompt injection, tool and context poisoning, excessive agency, delegated authorization, data leakage, and supply-chain risk in models and tools; familiarity with the OWASP Top 10 for LLM Applications, the OWASP Top 10 for Agentic Applications, or comparable frameworks
- Ability to design evaluations for agentic workflows covering task success, false positives and negatives, adversarial cases, and regression checks
- Proven experience leading threat modeling (e.g., STRIDE, attack trees) and design reviews for complex applications and APIs
- Deep understanding of web application and API security, including authentication and authorization (OAuth 2.0 scopes and delegation, OpenID Connect, token audience and validation), session management, and access control models
- Strong software engineering skills in at least one language (e.g., Python, TypeScript, PHP), including testing and maintaining tools other people depend on
- A track record of influencing without authority: leading cross-team initiatives, building business cases, and explaining technical risk in business terms to engineering, product, legal, and leadership audiences
- Experience mentoring engineers, formally or informally
- Sound judgment in ambiguous situations, including the ability to explain a tradeoff, recommend a mitigation, and bring risk-acceptance decisions to the right owner
What Will Make Us REALLY Love You
- Experience securing MCP servers and gateways
- Experience securing AI coding assistants or developer agent tooling at organizational scale, or integrating AI-driven security checks into CI/CD pipelines
- Familiarity with AI governance and SaaS compliance frameworks (e.g., NIST AI RMF, ISO/IEC 42001, EU AI Act, SOC 2, ISO 27001)
- Relevant security certifications (e.g., CSSLP, OSWE, GWAPT)
- Experience building or running security champions programs, such as recruiting and training champions or embedding security advocates in engineering teams
What You'll Love About Us
- A Great Company Culture that has been recognized by multiple organizations like Inc, and Salt Lake Tribune
- Comprehensive health, life, and disability insurance
- Generous leave policies that include 4 weeks of vacation, 12 company holidays, parental leave, and volunteer time off so you can enjoy quality of life
- 401k plans with up to 6% company match
- $2000 Paid-Paid Vacation bonus
- EAP through Headspace
- Check out all our benefits that benefit you
#LI-Remote
About Us
At BambooHR, we're building something different: we're building a people intelligence platform that transforms HR and sets people free to do great work! We're a proven market leader driving innovation while building lasting success through thoughtful, sustainable growth. Here, you'll find a place that champions growth: both professional and personal, both individual and collective.
We invest in potential, giving you the space to stretch your capabilities and turn good ideas into reality while providing the safety net of a supportive, values-driven culture. Our approach combines meaningful work with meaningful lives, offering competitive benefits, professional development, and the flexibility to thrive both in and outside the office.
What sets us apart isn't just what we do, but how we do it: with openness, integrity, and a shared commitment to doing the right thing. Join us in creating HR software that makes work better for everyone, while we make work better for you.
BambooHR is committed to the full inclusion of all qualified individuals and will ensure that persons with disabilities are provided reasonable accommodations throughout the hiring process. If you would like to request accommodations, please let your recruiter know.
BambooHR is An Equal Opportunity Employer-M/F/D/V
Because our team members are trusted to handle sensitive information, we require all candidates that receive and accept employment offers to complete a background check before being hired.
For information on California Privacy Policy, click here.
Our process utilizes AI as an assistant to efficiently process and analyze candidate data. Recruiters and hiring managers maintain full oversight and accountability, ensuring that all final selection and rejection decisions are human-made and based solely on objective job qualifications. Please see our General Privacy Notice and California Privacy Notice for more details.
See our AI Guidelines for Candidates for details on how BambooHR uses AI in recruiting, how we expect candidates to use AI, and what is not allowed.
Please Note: This is a remote position available in the state listed on this job. Additionally, employment with BambooHR is contingent on passing both a background and credit check.
AI at BambooHR
At BambooHR, we believe in leveraging cutting-edge technology to empower people and transform HR. We're actively integrating AI into our solutions and workflows to enhance efficiency and drive innovation. To that end, we're looking to our existing team members and future hires to share this forward-thinking mindset: individuals who are curious about AI's potential, eager to learn and adapt, and ready to explore how intelligent tools can elevate their work along with BambooHR's impact on setting people free to do great work. Join us in reimagining the future of HR!
Essential Job Duties
AI is becoming part of how BambooHR's platform works, from features we build to agents that connect through open protocols. As a Staff Application Security Engineer, you will set the review bar and standards for agentic systems and architect the agents our security team uses to scale its work. This is a hands-on, organization-level role for someone who thrives in ambiguity and gets results through knowledge, influence, and collaboration.
You will:
- Lead security reviews and threat models of AI features and agentic systems — including autonomous agents, MCP servers, and third-party integrations — and keep review playbooks and quality criteria current
- Set BambooHR's security standards for AI agents, covering identity and delegated authorization, tenant- and user-scoped data access, safe handling of tool output, tool supply chain, and human-approval requirements, and track adoption as threats evolve
- Own the design of agents the security team uses for finding validation, triage, review assistance, and remediation — building and shipping them with clear evaluation criteria, bounded permissions, and human approval gates for high-impact actions
- Help developers and security champions build and use agents safely through self-serve guidance and tooling, and advocate for the partner-team investment that work requires
- Work with engineering and product leadership to embed security requirements into the SDLC, including design-time and release-time gates for AI features, and make agent-assisted code review, finding validation, and fix suggestions a default part of every team's CI/CD pipeline with clear blocking criteria and a fast exception path
- Run security programs that span multiple teams and quarters — setting goals, milestones, and success metrics; maintaining a lightweight intake, prioritization, and retrospective cadence; coordinating dependencies across engineering, product, and operations; and reporting progress, risks, and tradeoffs to leadership
- Represent AppSec in architecture forums, harmonize security requirements to reduce duplicated effort across teams, act as a point of escalation, and coach leaders on security tradeoffs
- Partner with Legal, Privacy, and GRC on AI governance to close gaps between policy intent and technical implementation through guardrails and automation, including for emerging AI regulations
- Train and coach software engineers and engineering teams on secure design and threat modeling, with emphasis on authentication, authorization, multi-tenancy, and AI features
- Mentor fellow security engineers on technical direction and career growth, and close skill gaps on the security team through onboarding, training, and mentorship
- Participate in an on-call rotation as needed to support incident response and resolve escalated security issues
What You Need to Get the Job Done
- Bachelor's degree in Computer Science, Information Security, or a related field, or equivalent practical experience
- 8+ years of experience in security, including 5+ years of hands-on experience in application security
- Experience securing multi-tenant SaaS platforms, including tenant isolation
- Cloud and infrastructure security experience (e.g., AWS, Azure, GCP)
- Hands-on experience building AI agents or agentic workflows, with concrete examples of how you handled permissions, failures, and validation — production systems, internal tools, personal or open-source projects, and substantial prototypes all count
- Demonstrated ability to evaluate the security of AI and agentic systems, including prompt injection, tool and context poisoning, excessive agency, delegated authorization, data leakage, and supply-chain risk in models and tools; familiarity with the OWASP Top 10 for LLM Applications, the OWASP Top 10 for Agentic Applications, or comparable frameworks
- Ability to design evaluations for agentic workflows covering task success, false positives and negatives, adversarial cases, and regression checks
- Proven experience leading threat modeling (e.g., STRIDE, attack trees) and design reviews for complex applications and APIs
- Deep understanding of web application and API security, including authentication and authorization (OAuth 2.0 scopes and delegation, OpenID Connect, token audience and validation), session management, and access control models
- Strong software engineering skills in at least one language (e.g., Python, TypeScript, PHP), including testing and maintaining tools other people depend on
- A track record of influencing without authority: leading cross-team initiatives, building business cases, and explaining technical risk in business terms to engineering, product, legal, and leadership audiences
- Experience mentoring engineers, formally or informally
- Sound judgment in ambiguous situations, including the ability to explain a tradeoff, recommend a mitigation, and bring risk-acceptance decisions to the right owner
What Will Make Us REALLY Love You
- Experience securing MCP servers and gateways
- Experience securing AI coding assistants or developer agent tooling at organizational scale, or integrating AI-driven security checks into CI/CD pipelines
- Familiarity with AI governance and SaaS compliance frameworks (e.g., NIST AI RMF, ISO/IEC 42001, EU AI Act, SOC 2, ISO 27001)
- Relevant security certifications (e.g., CSSLP, OSWE, GWAPT)
- Experience building or running security champions programs, such as recruiting and training champions or embedding security advocates in engineering teams
What You'll Love About Us
- A Great Company Culture that has been recognized by multiple organizations like Inc, and Salt Lake Tribune
- Comprehensive health, life, and disability insurance
- Generous leave policies that include 4 weeks of vacation, 12 company holidays, parental leave, and volunteer time off so you can enjoy quality of life
- 401k plans with up to 6% company match
- $2000 Paid-Paid Vacation bonus
- EAP through Headspace
- Check out all our benefits that benefit you
#LI-Remote
About Us
At BambooHR, we're building something different: we're building a people intelligence platform that transforms HR and sets people free to do great work! We're a proven market leader driving innovation while building lasting success through thoughtful, sustainable growth. Here, you'll find a place that champions growth: both professional and personal, both individual and collective.
We invest in potential, giving you the space to stretch your capabilities and turn good ideas into reality while providing the safety net of a supportive, values-driven culture. Our approach combines meaningful work with meaningful lives, offering competitive benefits, professional development, and the flexibility to thrive both in and outside the office.
What sets us apart isn't just what we do, but how we do it: with openness, integrity, and a shared commitment to doing the right thing. Join us in creating HR software that makes work better for everyone, while we make work better for you.
BambooHR is committed to the full inclusion of all qualified individuals and will ensure that persons with disabilities are provided reasonable accommodations throughout the hiring process. If you would like to request accommodations, please let your recruiter know.
BambooHR is An Equal Opportunity Employer-M/F/D/V
Because our team members are trusted to handle sensitive information, we require all candidates that receive and accept employment offers to complete a background check before being hired.
For information on California Privacy Policy, click here.
Our process utilizes AI as an assistant to efficiently process and analyze candidate data. Recruiters and hiring managers maintain full oversight and accountability, ensuring that all final selection and rejection decisions are human-made and based solely on objective job qualifications. Please see our General Privacy Notice and California Privacy Notice for more details.
See our AI Guidelines for Candidates for details on how BambooHR uses AI in recruiting, how we expect candidates to use AI, and what is not allowed.
See All 11 Remote Staff Application Engineer Jobs
Find roles that match your experience and apply in just a few clicks.
Find JobsRemote Staff Application Engineer Job Market
Who's Hiring
What Employers Look For
The qualifications that appear most often in remote staff application engineer jobs.
- Bachelor's degree in electrical engineering, computer engineering, or a closely related technical field
- Hands-on experience with the product category the role supports, such as power electronics, FPGAs, or industrial sensors
- Demonstrated ability to provide pre-sales or post-sales technical support directly to engineering customers
- Proficiency with lab tools and documentation including oscilloscopes, schematics, and application notes
- Strong written and verbal communication skills for presenting to both technical and non-technical audiences
- Willingness to travel to customer sites, with requirements varying from occasional to frequent depending on territory
Tips for Your Remote Staff Application Engineer Job Search
Apply early to remote roles that fit
Migrate Mate lists remote staff application engineer openings from across the U.S. in one place, so you can find roles that match your stack and experience level and apply directly without sorting through unrelated postings.
Show async communication in your application
Remote staff application engineers spend more time in written tickets, Slack threads, and async handoffs than in meetings. Highlight examples of technical documentation, written RCAs, or integration guides you have owned to signal that you can operate without real-time direction.
Build a portfolio of deployment and integration work
Remote hiring managers for staff application engineer roles screen for evidence of independent delivery. Document two or three end-to-end projects that show how you scoped, implemented, and handed off a solution, with enough technical detail that an engineer can evaluate your reasoning.
Prepare for remote technical screening formats
Remote staff application engineer interviews often involve live debugging sessions, architecture walkthroughs over video, and written take-home assessments rather than whiteboard exercises. Practice explaining your design decisions in clear spoken and written form, since remote teams weight communication heavily alongside technical depth.
Remote Staff Application Engineer Jobs: Frequently Asked Questions
How do I get a remote staff application engineer job?
Target companies with distributed engineering teams or remote-first cultures, since they build the workflows that let staff application engineers operate independently from day one. Remote employers screen heavily for async written communication, self-direction, and the ability to scope and deliver solutions without daily oversight. A portfolio showing end-to-end application deployments, integration work, or customer-facing technical wins gives you a clear edge over candidates with equivalent titles but thinner documentation.
Which companies hire remote staff application engineers?
Remote staff application engineer roles are posted by Mozilla Corporation, Reltio, and Trimedx and others right now, based on current remote listings on Migrate Mate as of November 2026. These tend to be remote-first software companies, distributed enterprise technology teams, and industrial or infrastructure firms that support customers and internal engineering teams across multiple regions without requiring on-site presence.
Can you get a remote staff application engineer job with no experience?
Yes, but remote entry-level roles are harder to land because employers expect you to troubleshoot and deliver without in-person support. Remote-first SaaS companies and smaller distributed teams are more likely to take a chance on junior candidates than large enterprises. Demonstrating hands-on project work, familiarity with async collaboration tools, and clear written technical communication can substitute for formal experience when formal credentials are thin.
Do you need a degree for remote staff application engineer jobs?
Not always. Many remote employers weigh demonstrated technical skills, completed projects, and certifications alongside or instead of a formal degree for staff application engineers. Remote teams in cloud, enterprise software, and industrial technology regularly hire candidates who can show real application work, strong systems knowledge, and the ability to communicate technical decisions clearly in writing, regardless of academic background.
See All 11 Remote Staff Application Engineer Jobs
Find roles that match your experience and apply in just a few clicks.
Find Jobs