{"id":1309266,"url":"https://alion.io/job/airapps-security-engineer-9","title":"Security Engineer","company":{"id":3822995,"name":"Air Apps","domain":"airapps.co","url":"https://alion.io/company/airapps","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":{"grade":"A","score":91,"open_postings":424,"ghost_share":0.068,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":106,"computed_at":"2026-10-31T05:58:55Z"}},"role":"Security","role_family":"Security","seniority":"middle","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["San Francisco, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":110000,"max":193000,"currency":"USD","period":"year","gross":null,"usd_annual":193000},"salary_estimate":null,"experience_years_min":4,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"CI/CD","optional":false},{"name":"GCP","optional":false},{"name":"GDPR","optional":false},{"name":"IAM","optional":false},{"name":"ISO 27001","optional":false},{"name":"Nessus","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"Qualys Cloud Platform","optional":false},{"name":"SIEM","optional":false},{"name":"SOC 2","optional":false},{"name":"Threat Modeling","optional":false}],"status":"live","first_seen_at":"2025-03-27T21:43:58Z","employer_posted_date":"2025-03-27","last_verified_at":"2026-10-31T20:51:32Z","board_verified":true,"closed_at":null,"days_open":583,"trust":{"level":"ghost","repost_count":0,"flags":["stale","company_stale"],"days_open":582},"description":"About Air Apps\nAt Air Apps, we believe in thinking bigger-and moving faster. We’re a family-founded company on a mission to create the world’s first AI-powered Personal & Entrepreneurial Resource Planner (PRP), and we need your passion and ambition to help us change how people plan, work, and live. Born in Lisbon, Portugal in 2018-and now with offices in both Lisbon and San Francisco-we’ve remained self-funded while reaching over 100 million downloads worldwide.\nOur long-term focus drives us to challenge the status quo every day, pushing the boundaries of AI-driven solutions that truly make a difference. Here, you’ll be a creative force, shaping products that empower people across the globe.\nJoin us on this journey to redefine resource management-and change lives along the way.\nThe Role\nAs a Security Engineer at Air Apps, you will be responsible for safeguarding our applications, infrastructure, and data from threats and vulnerabilities. You will work closely with development, DevOps, and IT teams to implement secure coding practices, vulnerability scanning, and threat modeling to ensure our systems remain resilient against cyber threats.\nYour expertise will help build and maintain a secure development lifecycle (SDLC), security monitoring frameworks, and proactive risk mitigation strategies.\nResponsibilities\nDevelop and implement threat modeling to identify security risks across applications and infrastructure.\n\nConduct vulnerability scanning, penetration testing, and security assessments to detect weaknesses.\n\nDefine and enforce secure coding practices in collaboration with development teams.\n\nWork with DevOps to integrate security into CI/CD pipelines and automate security testing.\n\nMonitor and respond to security incidents, conducting root cause analysis and implementing preventative measures.\n\nEnsure compliance with security standards and regulations (e.g., ISO 27001, GDPR, SOC 2).\n\nDesign and implement identity and access management (IAM) policies, encryption standards, and authentication mechanisms.\n\nCollaborate with product teams to conduct security reviews of features, APIs, and third-party integrations.\n\nDevelop incident response plans, security documentation, and best practices.\n\nStay ahead of emerging threats, vulnerabilities, and security technologies.\n\nRequirements\nAround 4+ years of experience in cybersecurity, application security, or security engineering.\n\nStrong knowledge of secure coding principles, OWASP Top 10, and threat modeling techniques.\n\nExperience with vulnerability scanning tools (Nessus, Qualys, Burp Suite) and penetration testing methodologies.\n\nHands-on experience with SIEM, intrusion detection systems (IDS), and security monitoring tools.\n\nProficiency in scripting and automation (Python, Bash, PowerShell) for security tasks.\n\nFamiliarity with cloud security in AWS, Azure, or GCP, including IAM and workload protection.\n\nKnowledge of encryption protocols, network security, and API security best practices.\n\nExperience working with DevSecOps, integrating security into CI/CD pipelines.\n\nAbility to analyze security logs, detect anomalies, and mitigate potential threats.\n\nExcellent problem-solving skills and ability to communicate security concepts to non-technical stakeholders.\n\nWhat benefits are we offering?\nApple hardware ecosystem for work.\n\nAnnual Bonus.\n\nMedical Insurance (including vision & dental).\n\nDisability insurance - short and long-term.\n\n401k up to 4% contribution.\n\nAir Conference - an opportunity to meet the team, collaborate, and grow together.\n\nTransportation budget\n\nFree meals at the hub\n\nGym membership\n\nDiversity & Inclusion\nAt Air Apps, we are committed to fostering a diverse, inclusive, and equitable workplace. We enthusiastically welcome applicants from all backgrounds, experiences, and perspectives. We celebrate diversity in all its forms and believe that varied voices and experiences make us stronger.\nApplication Disclaimer\nAt Air Apps, we value transparency and integrity in our hiring process. Applicants must submit their own work without any AI-generated assistance. Any use of AI in application materials, assessments, or interviews will result in disqualification.\nImportant Notice\nAir Apps does not partner with nor is represented by any recruiting agencies, staffing firms, or third-party recruiters in connection with our hiring efforts. All legitimate communication regarding Air Apps opportunities will come exclusively from an official @airapps.com email address. Additionally, all open positions are published only through our official careers platform, Ashby.\nIf you are contacted by anyone claiming to represent Air Apps from a different email domain, through a recruiting agency, or via a job posting source other than Ashby, please exercise caution. We do not accept unsolicited candidate submissions from agencies, and any such submissions will not be considered.","description_format":"text","description_chars":4903,"description_truncated":false,"requirements":{"experience_years_min":4,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["401k plan","Gym membership","Health insurance"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Office & Productivity Software","Consumer & Utility Software"],"lifecycle":[{"event":"open","at":"2026-09-26T15:18:27Z"}],"visa":[],"liveness":{"score":4,"band":"cold","label":"Long shot","p_open":1,"p_active":0.158,"p_room":0.28,"age_days":582,"expected_fill_days":106,"reasons":["conf:3","evergreen","ghost","win:tail","crowd:brand"],"computed_at":"2026-10-31T05:58:55Z"},"pay":{"stated_usd_annual":193000,"is_top_pay":true},"html_url":"https://alion.io/job/airapps-security-engineer-9","json_url":"https://alion.io/job/airapps-security-engineer-9.json","meta":{"generated_at":"2026-10-31T22:14:11Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":34715,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-01T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3822995},"rest":"https://alion.io/mcp/rest/get_company?id=3822995"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fairapps-security-engineer-9"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fairapps-security-engineer-9"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fairapps-security-engineer-9"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/airapps-security-engineer-9\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fairapps-security-engineer-9"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":1309266}},{"tool":"search_jobs","arguments":{"company":"airapps.co","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":1309266},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}