Altruist is seeking a Senior Application Security Engineer to join its Security team. The role focuses on securing our products from design and code through the CI/CD pipeline. This is a hybrid position with three days per week onsite in Los Angeles, CA. Responsibilities include educating development teams on secure coding practices and emerging security threats; performing technical security assessments and code reviews of Java/Spring services; conducting threat modeling; developing secure libraries and paving-road patterns to embed security into new features; owning and tuning SAST, DAST, SCA and other security tooling in CI/CD pipelines; triaging findings and driving remediation with clear prioritization; partnering with engineering to close service-to-service authentication/authorization gaps and other systemic issues; working with Detection & Response and offensive security to turn findings into durable detections and preventive measures; contributing to secure SDLC standards and developer guardrails. What you’ll bring: 4+ years as an Application/Security Engineer; hands-on secure code review experience (Java/Spring or similar); experience operating SAST/DAST/SCA and secrets scanning tooling in CI/CD; ability to work independently; BA/BS in Computer Science, Computer Engineering, Information Security, or related field; technical aptitude with modern stacks (Java, Spring, Terraform, Kubernetes); strong communication skills; resilience; ownership; and creative problem solving. Bonus points for fintech/regulatory experience; AppSec automation or paved-road development; AW

Altruist is seeking a Senior Application Security Engineer to join its Security team. The role focuses on securing our products from design and code through the CI/CD pipeline. This is a hybrid position with three days per week onsite in Los Angeles, CA. Responsibilities include educating development teams on secure coding practices and emerging security threats; performing technical security assessments and code reviews of Java/Spring services; conducting threat modeling; developing secure libraries and paving-road patterns to embed security into new features; owning and tuning SAST, DAST, SCA and other security tooling in CI/CD pipelines; triaging findings and driving remediation with clear prioritization; partnering with engineering to close service-to-service authentication/authorization gaps and other systemic issues; working with Detection & Response and offensive security to turn findings into durable detections and preventive measures; contributing to secure SDLC standards and developer guardrails. What you’ll bring: 4+ years as an Application/Security Engineer; hands-on secure code review experience (Java/Spring or similar); experience operating SAST/DAST/SCA and secrets scanning tooling in CI/CD; ability to work independently; BA/BS in Computer Science, Computer Engineering, Information Security, or related field; technical aptitude with modern stacks (Java, Spring, Terraform, Kubernetes); strong communication skills; resilience; ownership; and creative problem solving. Bonus points for fintech/regulatory experience; AppSec automation or paved-road development; AW