{"id":2746,"url":"https://alion.io/job/clear-capital-senior-application-security-engineer","title":"Senior Application Security Engineer","company":{"id":1216,"name":"Clear Capital","domain":"clearcapital.com","url":"https://alion.io/company/clear-capital","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Lever","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":[],"countries":[],"hiring_countries":["US"],"hiring_countries_total":1,"salary":{"min":111000,"max":144400,"currency":"USD","period":"year","gross":null,"usd_annual":144400},"salary_estimate":null,"experience_years_min":4,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Galileo","optional":false},{"name":"GDPR","optional":false},{"name":"ISO 27001","optional":false},{"name":"LLM","optional":false},{"name":"SOC 2","optional":false},{"name":"Threat Modeling","optional":false},{"name":"C++","optional":true},{"name":"JavaScript","optional":true},{"name":"OWASP","optional":true},{"name":"PHP","optional":true},{"name":"PowerShell","optional":true},{"name":"Python","optional":true},{"name":"Ruby","optional":true}],"status":"live","first_seen_at":"2026-07-06T18:32:41Z","employer_posted_date":"2026-07-06","last_verified_at":"2026-11-04T11:40:28Z","board_verified":true,"closed_at":null,"days_open":120,"trust":{"level":"ok","repost_count":2,"flags":["repost"],"days_open":120},"description":"The Sr. Application Security Engineer is responsible for validating that application services are designed and implemented with high security standards. The role analyzes the security of applications in tandem with their underlying services, including connected dependencies such as middle-tier systems and databases. Additionally, the Sr. Application Security Engineer addresses legacy and emerging security issues, and implements repeatable secure development practices to reduce the introduction of program design flaws that may lead to exploitation. As issues are uncovered, the application security engineer communicates with the appropriate technical and leadership teams to ensure a focus on risk mitigation - allowing for business continuity, but without negligent risk. Application Security Engineers are constantly assessing applications for weaknesses and finding resolutions before they can be abused.\nThis position is also responsible for assessing the security of applications for business-to-business initiatives, third-party relationships, outsourced solutions and vendors. The Sr. Application Security Engineer is expected to recommend programmatic controls, and monitor and manage secure development practices to address modern day issues. Application Security Engineers think like attackers, but always act with integrity and do not abuse their privilege.\nWhat You Will Work On\nPlan and carry out application security testing in all phases of the software development life cycle to identify vulnerabilities in applications and weaknesses in secure coding practices.\nAssess discovered vulnerabilities and recommend risk-mitigating solutions, leveraging automation to improve the efficiency of both testing and remediation processes.\nCommunicate findings, risks, and recommendations to stakeholders, while documenting delivery and implementation progress against defined service-level agreements (SLAs) and business metrics.\nLead AI security initiatives, including threat modeling production LLM stacks for autonomy and prompt injection risks, and auditing third-party models and APIs to secure the software supply chain.\nAttend and participate in product and application projects. This includes interacting with business units and technical teams to understand what is coming and how their projects can be more secure from the beginning.\nCollaborate with architects and development teams to drive secure design practices, leveraging established security standards, configurations, and frameworks.\nFully define and follow a security review process to ensure an automated and repeatable process is managed. \nRegularly monitor the security community for public-facing security issues, as well as to learn new tactics that can be used in testing.\nTrain developers and junior application security engineers on weaknesses to avoid.\nPerform other duties as assigned.\nWho We Are Looking For\n4+ years of related experience required. \nBachelor’s Degree, ideally in a technically related field (Computer Science, Information Technology, Software Engineering), or equivalent work experience.\nHighly technical and analytical, with a background in software development, and scripting (e.g., Java, Python, C++, Ruby, JavaScript, PowerShell, PHP).\nExpertise in application security testing, including hands-on experience with Static (SAST), Dynamic (DAST), and Software Composition Analysis (SCA) tools.\nProficiency in application security assessments, including threat modeling, vulnerability and penetration testing, API security, OWASP Top Ten mitigation, and securing applications in AWS and private cloud environments.\nRelevant certifications such as C|ASE, CSSLP, GWAPT, OSCP, or equivalent.\nExperience with frameworks such as ISO 27001, NIST, GDPR, CIS, or SOC 2.\nWhat You Can Expect\nCompensation: The base salary for this position ranges from $111,000 to $144,400 annually, depending on your location, experience, and qualifications. Additional compensation offerings include company profit-sharing bonus program, communication stipends, and referral bonuses. \nInclusive benefits package offering: \nComprehensive medical, dental, and company paid vision insurance, 401(k) retirement plan with employer match, voluntary life and AD&D insurance options, voluntary supplemental insurances for accident, critical illness, and legal services, paid time off (PTO) and paid holidays, employee assistance and wellness programs, company paid short term disability coverage, company contributions to health saving funds (with participation in the high deductible health plan. We offer company paid access to Galileo for virtual primary care and Rula for virtual mental health resources.\nThrough our Anniversary Program, we celebrate the meaningful milestones and long tenure that reflect how much we value your contributions and commitment to our team.\nCareer and skill development resources to help advance your career and personal growth.\nA mission-driven environment where your work makes a measurable impact on the real estate industry.\nWhat We Value\nWherever it Leads, Whatever it Takes® - No matter how remote, complex, or unexpected. Our commitment never wavers.\nHire NICE people - Skills can be taught but character shines through. We seek those who bring integrity, kindness, and grit.\nLift others up - We lead with empathy and strive to improve the lives of those around us.\nSweat the details - Excellence lives in the little things. Getting it just so is how we make a big impact.\nRaise the bar - We don’t settle for industry standards, we redefine them.","description_format":"text","description_chars":5565,"description_truncated":false,"requirements":{"experience_years_min":4,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Retirement plans","Vision insurance","Wellness"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Application Security","Real Estate","PropTech","Real Estate Appraisal"],"lifecycle":[{"event":"open","at":"2026-07-06T18:32:41Z"},{"event":"close","at":"2026-09-12T05:31:53Z"},{"event":"reopen","at":"2026-09-16T02:11:55Z"},{"event":"close","at":"2026-10-15T23:29:30Z"},{"event":"reopen","at":"2026-11-02T22:15:07Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 2","filings_12m":2,"filings_prev_12m":1,"green_card_filings_12m":0,"median_offered_wage_usd":142500,"route":null,"cap_exempt":false,"checked_at":"2026-10-29T16:27:21+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)"],"filings_for_role_12m":1}],"liveness":{"score":13,"band":"cold","label":"Long shot","p_open":1,"p_active":0.45,"p_room":0.28,"age_days":120,"expected_fill_days":58,"reasons":["conf:4","repost:2","win:tail","crowd:"],"computed_at":"2026-11-04T06:34:25Z"},"pay":{"stated_usd_annual":144400,"is_top_pay":false},"html_url":"https://alion.io/job/clear-capital-senior-application-security-engineer","json_url":"https://alion.io/job/clear-capital-senior-application-security-engineer.json","meta":{"generated_at":"2026-11-04T13:19:58Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":20185,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-05T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1216},"rest":"https://alion.io/mcp/rest/get_company?id=1216"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fclear-capital-senior-application-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fclear-capital-senior-application-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fclear-capital-senior-application-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/clear-capital-senior-application-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fclear-capital-senior-application-security-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":2746}},{"tool":"search_jobs","arguments":{"company":"clearcapital.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":2746},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}