{"id":3978381,"url":"https://alion.io/job/angi-senior-security-engineer-application-security","title":"Senior Security Engineer, Application Security","company":{"id":668829,"name":"Angi","domain":"angi.com","url":"https://alion.io/company/angi-2","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":{"grade":"B","score":75,"open_postings":4,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":35,"computed_at":"2026-11-09T06:03:00Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"posting_text","remote_working_hours":{"label":"CT","utc_offset_min":-6,"utc_offset_max":-6},"hiring_geo_confidence":"structured","locations":[],"countries":[],"hiring_countries":["US"],"hiring_countries_total":1,"salary":{"min":150000,"max":225000,"currency":"USD","period":"year","gross":null,"usd_annual":225000},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":true,"technologies":[{"name":"AI Agents","optional":false},{"name":"AWS","optional":false},{"name":"CloudFormation","optional":false},{"name":"Fortify","optional":false},{"name":"Kotlin","optional":false},{"name":"Kubernetes","optional":false},{"name":"LLM","optional":false},{"name":"Next.js","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"OWASP ZAP","optional":false},{"name":"PCI DSS","optional":false},{"name":"Python","optional":false},{"name":"Qualys Cloud Platform","optional":false},{"name":"Ruby","optional":false},{"name":"Scala","optional":false},{"name":"Snyk","optional":false},{"name":"Terraform","optional":false},{"name":"Threat Modeling","optional":false},{"name":"Veracode","optional":false},{"name":"JavaScript","optional":true},{"name":"React.js","optional":true}],"status":"live","first_seen_at":"2026-11-09T16:05:07Z","employer_posted_date":"2026-11-09","last_verified_at":"2026-11-09T18:53:57Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"For over 30 years, Angi has powered the future of the home services industry, creating an environment where homeowners and pros benefit from more jobs done well.\nFor homeowners, our platform is a reliable way to find skilled pros. For pros, we're a reliable business partner who helps them find the winnable work they want, when they want. For employees, we're an amazing place to call home. We can't wait to welcome you.\nAngi at a glance:\nFounded in 1995 as Angie’s List and rebranded in 2021\n\nGlobal company with 9 brands in 8 countries and employees worldwide\n\nHomeowners have turned to us for 300 million home projects and counting\n\nAbout the team:\nAt Angi, security is woven into everything we build, from PCI-scoped payment flows to the AI agents now handling homeowner / pro conversations and scheduling end-to-end. The team is small and the surface is not: cloud infrastructure, applications, and a growing set of agentic AI products. You'll own security architecture and execution across all three.\nWhile this is a remote position, we are a global company and are looking for applicants located in eastern or central time zones to align with our team's working hours.\nWhat you’ll do:\nOwn security initiatives end to end across cloud infrastructure hardening and application security, including work that spans several sprints and arrives ambiguous.\n\nOwn the technical controls that InfoSec retains within compliance frameworks such as PCI DSS (e.g., ASV scanning, network security control reviews, tamper-detection monitoring).\n\nDeploy and tune the infrastructure protecting Angi's applications from exploitation, account takeover, and denial of service.\n\nDrive security architecture and threat modeling for Angi's AI agent products (voice/chat agents with calendar and account access).\n\nReview RFCs, PRDs, and MRs from a security lens, and partner directly with product/engineering teams shipping AI-native features. You will be in the room when these are designed, not brought in after the fact.\n\nBuild the tooling and frameworks that make the secure path the easy path for Angi's engineers - paved roads, not policy documents.\n\nMentor engineers within and across teams, and improve the status quo where you find it - recurring incident patterns, tooling gaps, process debt.\n\nActively participate in all facets of the incident response lifecycle by participating in a 24/7 on-call rotation.\n\nContinuously evaluate and integrate AI-driven tooling into InfoSec's own workflows. You're expected to use AI coding/security assistants daily, not just secure them for others.\n\nWho you are:\n5+ years in security engineering, spanning at least two of: application security, cloud/infrastructure security, or enterprise security.\n\nHands-on with AWS and infrastructure-as-code (Terraform, CloudFormation, or equivalent); comfortable reading and contributing to product service code (Kotlin, NextJS, Python, Ruby, Scala, or Swift are preferred).\n\nSound build-versus-buy judgment with no allergy to either answer. You reach for what exists when it fits, and you're comfortable wrapping, extending, or replacing it when it doesn't.\n\nFluent in the OWASP Top 10 and how each is actually remediated, and in the authentication and authorization standards Angi runs on (OAuth, OIDC, SAML).\n\nSome level of exposure to LLM/agentic system security (prompt injection, agent identity, data exfiltration via AI systems).\n\nA daily, fluent user of AI-assisted coding/security tools. You are able to speak concretely about how you direct and verify AI output.\n\nStrong written communication: you'll write threat models and give written feedback on other people's design docs and merge requests regularly.\n\nComfort executing the technical side of a compliance framework (PCI, SOX, or similar) - vulnerability scanning, control reviews, tamper detection is preferred.\n\nHands-on experience in the tool categories this work runs through - static analysis (Snyk, Veracode, Fortify), infrastructure vulnerability scanning (Qualys, Tenable, Rapid7), and penetration testing tooling (BurpSuite, OWASP ZAP) is preferred.\n\nContainer and Kubernetes experience is preferred.\n\nCompensation & Benefits\nThe base salary band for this position ranges from $150,000 - $225,000, commensurate with experience and performance. Compensation may vary based on factors such as geographic location.\n\nThis position will be eligible for a competitive year end performance bonus & equity package.\n\nFull medical, dental, vision package to fit your needs.\n\nFlexible vacation policy; work hard and take time when you need it.\n\nPet discount plans & retirement plan with company match (401K).\n\nThe rare opportunity to work with sharp, motivated teammates solving some of the most unique challenges and changing the world.\n\nWe value diversity\nWe know that the best ideas come from teams where diverse points of view uncover new solutions to hard problems. We welcome and value individuals who bring diverse life experiences, educational backgrounds, cultures, and work experiences.\nOur hiring process may utilize artificial intelligence (AI) tools to assist in candidate screening and assessment. Our AI tools are designed to complement, not replace, human decision-making.","description_format":"text","description_chars":5221,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["401k plan","Equity","Flexible vacation policy","Retirement plans"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Application Security","Marketplaces","Local Services Marketplaces"],"lifecycle":[{"event":"open","at":"2026-11-09T18:53:57Z"}],"visa":[{"country":"US","licensed_sponsor":true,"adverts_offering_sponsorship_24m":0,"sanctioned_now":false,"evidence":"H-1B filings in 12 months: 7 · green card filings: 6","filings_12m":7,"filings_prev_12m":19,"green_card_filings_12m":6,"median_offered_wage_usd":176346,"route":null,"cap_exempt":false,"checked_at":"2026-11-09T07:32:21+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":0}],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":35,"reasons":["conf:1","win:early"],"computed_at":"2026-11-09T20:51:00Z"},"pay":{"stated_usd_annual":225000,"is_top_pay":true},"html_url":"https://alion.io/job/angi-senior-security-engineer-application-security","json_url":"https://alion.io/job/angi-senior-security-engineer-application-security.json","meta":{"generated_at":"2026-11-09T20:51:00Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":8476,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-10T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":668829},"rest":"https://alion.io/mcp/rest/get_company?id=668829"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fangi-senior-security-engineer-application-security"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fangi-senior-security-engineer-application-security"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fangi-senior-security-engineer-application-security"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/angi-senior-security-engineer-application-security\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fangi-senior-security-engineer-application-security"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3978381}},{"tool":"search_jobs","arguments":{"company":"angi.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3978381},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}