As an Application Security Engineer, you will lead security efforts for the SaaS platform, embedding security practices and responding to vulnerabilities while ensuring compliance and protecting customer data.
Our mission is to be the technology backbone for strategic competition against peer adversaries. These missions – including intelligence, information operations, special activities, and perception management – are happening today and their success or failure will determine if we go to war tomorrow.
We've been on the front lines of these missions since 2019, and have grown to support a wide range of missions across all US service branches, multiple combatant commands, partner nations, and interagency stakeholders. We deploy both hardware and software products to support people on the front lines that span collection, planning / assessments, and effects.
We've grown from $3M in run-rate revenue in 2021 to $80M in run-rate revenue today. We've been profitable since 2022 and have raised $91M in venture capital funding through Series B. We're valued at $1.5B as of 2025.
About the role
As the Founding Application Security Engineer, you will own and build the security backbone of our SaaS platform, ensuring we can ship features quickly — and safely — to our customers. You will partner with software, DevOps, and platform teams, while coordinating with audit partners, to embed threat modeling, automated SAST/SCA/DAST, and rapid vulnerability response into every stage of our SDLC. Your leadership will be pivotal in protecting customer data, meeting compliance milestones, and scaling our security posture as the company grows.
What you'll do
- Map our product attack surface, rank risks, and publish a 12-month security roadmap.
- Embed with development teams to run threat models, review critical PRs, and coach secure-by-default habits.
- Help implement and deploy SAST, SCA, secrets-scan, DAST, and container/IaC checks in CI/CD; drive MTTR on P1 vulns to < 7 days.
- Coordinate with DevOps for application security issues that cross between application and infrastructure layers
- Support incident-response for product issues and feed lessons back into code, docs, and process.
- Write customer-facing Product Security white-papers and supply compliance evidence.
Qualifications
- 5 + years in Application / Product Security
- Ability to read & write production-quality code
- Hands-on experience securing web applications and automating AppSec workflows.
- Familiarity with incident response fundamentals—log triage, forensics, retros—and a passion for eliminating root causes.
- Clear, concise communicator who can translate risk for engineers, leadership, and customers.
- Ideally experienced with AWS, Python, containers, TypeScript, Node.js, Django, PostgreSQL, and Rancher.
- Experience securing LLM workflows is a big plus
Benefits:
The salary range for this position is $160,000-$210,000 + equity + 401K match. Within the range, individual pay is determined by experience, relevant education, and/or training.
- Health, dental, and vision insurance
- 100% remote - work from anywhere in the US
- 401k matching
- Mental benefits
- Flexible work environment - you manage your workday
- Pet and child care reimbursement during travel
- Unlimited PTO
The salary range for this position is $160,000-$210,000 + equity + 401K match. Within the range, individual pay is determined by experience, relevant education, and/or training.
Vannevar Labs is an equal opportunity employer, and qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender perception or identity, national origin, age, marital status, protected veteran status, or disability status.
We encourage candidates from all backgrounds to apply, even if you don't feel like you're a perfect fit. If you're passionate about contributing to our mission, we'd love to hear from you!
IMPORTANT NOTICE
We are committed to protecting the privacy of all applicants. Official emails from the company will come from an @vannevarlabs.com domain. Under no circumstances will a legitimate representative from our company contact you to request passwords, financial information, or other sensitive personal data. Please be vigilant of potential scams.
We are committed to protecting the privacy of all applicants. Official emails from the company will come from an @vannevarlabs.com domain. Under no circumstances will a legitimate representative from our company contact you to request passwords, financial information, or other sensitive personal data. Please be vigilant of potential scams.
Top Skills
AWS
Containers
Django
Node.js
Postgres
Python
Rancher
Typescript
Similar Jobs at Vannevar Labs
Artificial Intelligence • Machine Learning • Software • Defense
Lead a cross-functional team in developing and deploying offensive cyber capabilities, focusing on customer mission problems and business growth.
Top Skills:
Cyber CapabilitiesGeospatial PlatformsSoftware Products
Artificial Intelligence • Machine Learning • Software • Defense
As a Forward Deployed Engineer, you will lead the architecture, development, and deployment of software solutions for national security missions. You will collaborate with cross-functional teams to deliver innovative software that assists government entities in deterrence and conflict management, while maintaining communication with mission owners and stakeholders.
Artificial Intelligence • Machine Learning • Software • Defense
The Deputy Head of Finance will lead M&A due diligence, optimize revenue operations, improve financial systems, and provide strategic financial insights to support growth and decision-making.
Top Skills:
Accounting SystemsFinancial ModelingRevenue Operations
What you need to know about the San Francisco Tech Scene
San Francisco and the surrounding Bay Area attracts more startup funding than any other region in the world. Home to Stanford University and UC Berkeley, leading VC firms and several of the world’s most valuable companies, the Bay Area is the place to go for anyone looking to make it big in the tech industry. That said, San Francisco has a lot to offer beyond technology thanks to a thriving art and music scene, excellent food and a short drive to several of the country’s most beautiful recreational areas.
Key Facts About San Francisco Tech
- Number of Tech Workers: 365,500; 13.9% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: Google, Apple, Salesforce, Meta
- Key Industries: Artificial intelligence, cloud computing, fintech, consumer technology, software
- Funding Landscape: $50.5 billion in venture capital funding in 2024 (Pitchbook)
- Notable Investors: Sequoia Capital, Andreessen Horowitz, Bessemer Venture Partners, Greylock Partners, Khosla Ventures, Kleiner Perkins
- Research Centers and Universities: Stanford University; University of California, Berkeley; University of San Francisco; Santa Clara University; Ames Research Center; Center for AI Safety; California Institute for Regenerative Medicine
