[Remote] Senior Application Security Engineer at Webflow

Candidates should have at least 3 years of application security experience with a strong background in web application security, secure coding, penetration testing, and insecure engineering practices. Proficiency with security tooling such as SCA, SAST, DAST, and API security is required, along with experience writing code for tool development, exploit scripting, or vulnerability remediation. Experience in evaluating applications for security design improvements, conducting threat modeling, and driving risk reduction through secure SDLC processes, tooling, and automation is necessary. Hands-on experience with bug bounty programs, including setup, exploit reproduction, and coordinating remediation, is expected. Familiarity with leveraging AI for security reviews and coding assistance is beneficial. Strong communication skills, a passion for security and continuous learning, and the ability to clearly share knowledge and mentor colleagues are essential. Business-level fluency in English is required.