Application Security Engineer – Remote

About the role

Levers is looking for a hands‑on Application Security Engineer with strong Python expertise to embed security throughout its SaaS platform. You will work remotely with a fast‑growing fintech team, shaping security practices from code to infrastructure.

Key responsibilities

• Build automation tools to collect and track security KPIs (e.g., % of critical vulnerabilities remediated).
• Conduct security code reviews for backend (Python) and infrastructure (Typescript) components.
• Review and approve change requests with a security‑first mindset.
• Identify, triage, and remediate vulnerabilities reported by automated scans.
• Define and enforce security policies and best practices across the organization.
• Perform web‑application security testing and vulnerability research.
• Collaborate with cybersecurity, DevOps, and infrastructure teams.
• Provide secure design guidance to development squads.

Required profile

• At least 2 years of Python development experience.
• Minimum 3 years of hands‑on cybersecurity experience.
• Solid understanding of Google Cloud Platform (GCP) – a plus.
• Familiarity with both offensive and defensive security practices.
• Comfortable thriving in a fast‑paced startup environment.

Required skills

• Python
• FastAPI
• PostgreSQL
• ClickHouse
• React
• Next.js
• tRPC
• Shadcn UI
• Storybook
• Kubernetes (GKE)
• ArgoCD
• Terraform / Terragrunt / Pulumi
• Ansible
• Google Cloud Platform
• Security code review
• Vulnerability management
• Web‑application security testing
• Automation scripting