{"id":3861156,"url":"https://alion.io/job/d-e-shaw-application-security-engineer","title":"Application Security Engineer","company":{"id":2494,"name":"D. E. Shaw","domain":"deshaw.com","url":"https://alion.io/company/d-e-shaw","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Security","role_family":"Security","seniority":null,"employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["New York, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":225000,"max":300000,"currency":"USD","period":"year","gross":null,"usd_annual":300000},"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"LLM Guardrails","optional":false}],"status":"closed","first_seen_at":"2026-11-06T08:24:16Z","employer_posted_date":null,"last_verified_at":"2026-11-06T15:20:45Z","board_verified":false,"closed_at":"2026-11-06T15:20:45Z","days_open":0,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":0},"description":"The D. E. Shaw Group is seeking an Application Security Engineer to strengthen application security across its technology environment. The role combines secure design and code reviews with building AI-enabled security workflows, evaluations, and tools, while partnering with developers on practical remediation and secure development practices.\n\nResponsibilities\nDesign, build, and operate agentic security workflows that continuously review code changes, using existing analyzers and custom analysis to investigate findings and propose fixes\nBuild evaluations, feedback loops, and guardrails that assess false positives, missed vulnerabilities, and the safety of proposed fixes, using known test cases and expert review\nLead security and design reviews for new and existing software, working directly with developers to identify vulnerabilities and recommend practical remediation\nHelp secure the firm's own use of agentic AI, assessing how developer agents and internal AI platforms handle identity, data access, and tool execution\nPartner with development teams to embed secure coding practices and strengthen the Secure Development Lifecycle (SDLC)\nRepresent Information Security to engineering teams, turning findings into clear, actionable guidance for technical and, occasionally, non-technical stakeholders\n\nSkills\nAt least five years of experience in application security, product security, security engineering, or software engineering with a solid security focus\nA bachelor's degree or higher in computer science or a related technical discipline\nAdvanced knowledge of web application security fundamentals, including web protocols, authentication and identity standards (e.g., OIDC), browser security behavior, and applied encryption basics\nFluency using AI in day-to-day engineering work\nA track record of building security software, such as product features, internal tools, custom scanners, or analysis capabilities, rather than only deploying or operating off-the-shelf tools\nHands-on experience finding and mitigating vulnerabilities in complex systems through secure design review, code review, or penetration testing\nFamiliarity with modern software development practices and workflows\nSound judgment and clear communication, with the ability to work effectively with developers and make security decisions independently\nAdvanced degrees in relevant specialties, such as cryptography, are welcome\nExperience building applications or agents with AI SDKs, or an understanding of security risks in agentic applications\n\nCompany Overview\nThe D. E. Shaw group is trusted by investors across the world to seek an optimal balance of risk and reward. It was founded in 1988, and is headquartered in New York, New York, USA, with a workforce of 1001-5000 employees. Its website is https://www.deshaw.com.\n\nCompany H1B Sponsorship\nThe D. E. Shaw Group has a track record of offering H1B sponsorships, with 55 in 2026, 50 in 2025, 34 in 2024, 19 in 2023, 29 in 2022, 34 in 2021, 24 in 2020. Please note that this does not guarantee sponsorship for this specific role.","description_format":"text","description_chars":3075,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Application Security","Hedge Funds & Alternative Investments"],"lifecycle":[{"event":"open","at":"2026-11-06T09:23:35Z"},{"event":"close","at":"2026-11-06T15:20:45Z"}],"visa":[{"country":"US","licensed_sponsor":true,"adverts_offering_sponsorship_24m":0,"sanctioned_now":false,"evidence":"H-1B filings in 12 months: 54 · green card filings: 8","filings_12m":54,"filings_prev_12m":42,"green_card_filings_12m":8,"median_offered_wage_usd":239919,"route":null,"cap_exempt":false,"checked_at":"2026-11-07T07:57:00+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":0}],"liveness":null,"pay":{"stated_usd_annual":300000,"is_top_pay":true},"html_url":"https://alion.io/job/d-e-shaw-application-security-engineer","json_url":"https://alion.io/job/d-e-shaw-application-security-engineer.json","meta":{"generated_at":"2026-11-07T17:58:17Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":26744,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-08T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2494},"rest":"https://alion.io/mcp/rest/get_company?id=2494"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fd-e-shaw-application-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fd-e-shaw-application-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fd-e-shaw-application-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/d-e-shaw-application-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fd-e-shaw-application-security-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3861156}},{"tool":"search_jobs","arguments":{"company":"deshaw.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3861156},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}