{"id":982336,"url":"https://alion.io/job/fomo-staff-security-engineer-application-security","title":"Staff Security Engineer, Application Security","company":{"id":9260,"name":"Fomo","domain":"fomo.family","url":"https://alion.io/company/fomo","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":null},"role":"Security","role_family":"Security","seniority":"staff","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["New York, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":270000,"max":330000,"currency":"USD","period":"year","gross":null,"usd_annual":330000},"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"CI/CD","optional":false},{"name":"GCP","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"Threat Modeling","optional":false}],"status":"live","first_seen_at":"2026-09-16T19:34:07Z","employer_posted_date":"2026-09-16","last_verified_at":"2026-11-03T05:43:15Z","board_verified":true,"closed_at":null,"days_open":47,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":47},"description":"About fomo\nfomo is a trading app for the rest of us. Sign up in seconds and start trading right away, with no prior experience needed. Our social features are actually useful: follow top traders, see their full portfolios and trades, and find opportunities early. Under the hood, we deliver best-in-class execution and data for experienced traders.\n\nIn just over a year, fomo has onboarded over 3 million plus users who have collectively done over $14 billion dollars in trading volume.\n\nfomo has made ~$100M of revenue since launching in May 2025, and has raised a total of ~$100M in addition from T1 investors. Investors include Benchmark, Index Ventures, and Union Square Ventures.\n\nhttps://fomo.family/\n\nhttps://x.com/fomo\n\nWant to learn more about the team, our growth, and life at fomo? Check out our Work at fomo page.\nAbout the role\nWe're hiring a Staff Security Engineer to own and elevate our application security program. This is a hands-on, high-leverage role for someone who wants to be the technical authority on how we build secure software, not just someone who reviews tickets after the fact. You'll work directly with the engineering team to find and fix vulnerabilities, build tooling that scales security across the org, and shape how fomo thinks about security at the architecture and code level.\n\nThis role skews heavily toward product and application security. You won't be spending your time on corporate IT, endpoint management, or employee-facing security operations. Instead, you'll be embedded in how our product is designed, built, and shipped.\n\nWhat you'll do\nLead security architecture reviews and threat modeling for new features and major system changes, partnering directly with engineering and product teams from design through launch\n\nOwn our secure SDLC program: static and dynamic analysis (SAST/DAST), dependency and software composition analysis, secrets scanning, and CI/CD security gates\n\nPerform deep-dive code reviews and manual penetration testing of high-risk services, APIs, and web applications\n\nDesign and build internal security tooling and guardrails that let engineers move fast without introducing risk\n\nRun and mature our vulnerability management program, including triage, severity scoring, and driving remediation with engineering owners\n\nManage relationships with external pentest vendors and bug bounty programs, and turn findings into durable fixes rather than one-off patches\n\nSet technical direction on authentication, authorization, API security, and data protection patterns used across the product\n\nMentor engineers on secure coding practices and act as a go-to resource for security questions across the org\n\nContribute to incident response when application-layer issues arise\n\nHelp define and evolve fomo's overall AppSec roadmap and metrics\n\nWhat we're looking for\n7+ years in security engineering, with a substantial and recent focus on application security (not primarily corporate/IT security)\n\nDeep hands-on experience with secure code review, threat modeling, and common vulnerability classes (OWASP Top 10, auth/session flaws, SSRF, injection, business logic flaws, etc.)\n\nStrong software engineering background; comfortable reading and writing production code, not just running scanners\n\nExperience building and scaling AppSec tooling and processes (SAST/DAST, SCA, CI/CD security integration) at a growing company\n\nTrack record of driving security into engineering culture through influence, not just gatekeeping\n\nFamiliarity with cloud-native environments (AWS/GCP/Azure), container security, and modern API architectures\n\nExcellent communication skills; able to explain risk to both engineers and non-technical stakeholders\n\nPrior experience as a technical lead or staff-level IC who can operate with high autonomy\n\nNice to Have\nExperience with bug bounty program management\n\nBackground in a high-growth consumer or marketplace product\n\nWhy fomo\nYou'll be the first dedicated AppSec hire shaping the security foundation of a company at real scale, with the autonomy to set standards rather than inherit them.\nCompensation and benefits\nfomo offers:\nCompetitive cash compensation and equity\n\nComprehensive health insurance including medical, dental, and vision for you and your dependents; including tax savings benefits such as HSAs and FSAs\n\n401(k) with match\n\nGroup term life insurance\n\nFlexible time off\n\nAnnual company offsites\n\nEqual opportunity\nfomo is an equal opportunity employer. We consider qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity or expression, national origin, age, disability, veteran status, or any other characteristic protected by applicable law. If you need a reasonable accommodation during the hiring process, please let us know.","description_format":"text","description_chars":4788,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Equity","Flexible time off","Health insurance","Life insurance"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Application Security","Blockchain & Crypto","Stablecoins","Online Brokerage & Trading Platforms"],"lifecycle":[{"event":"open","at":"2026-09-16T21:50:05Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 3","filings_12m":3,"filings_prev_12m":0,"green_card_filings_12m":0,"median_offered_wage_usd":197500,"route":null,"cap_exempt":false,"checked_at":"2026-10-29T16:27:21+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)"],"filings_for_role_12m":0}],"liveness":{"score":40,"band":"fade","label":"Fading","p_open":1,"p_active":0.729,"p_room":0.55,"age_days":47,"expected_fill_days":45,"reasons":["conf:0","win:tail"],"computed_at":"2026-11-03T05:54:40Z"},"pay":{"stated_usd_annual":330000,"is_top_pay":true},"html_url":"https://alion.io/job/fomo-staff-security-engineer-application-security","json_url":"https://alion.io/job/fomo-staff-security-engineer-application-security.json","meta":{"generated_at":"2026-11-03T08:53:36Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":12680,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-04T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":9260},"rest":"https://alion.io/mcp/rest/get_company?id=9260"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Ffomo-staff-security-engineer-application-security"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Ffomo-staff-security-engineer-application-security"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Ffomo-staff-security-engineer-application-security"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/fomo-staff-security-engineer-application-security\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Ffomo-staff-security-engineer-application-security"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":982336}},{"tool":"search_jobs","arguments":{"company":"fomo.family","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":982336},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}