{"id":29143,"url":"https://alion.io/job/ironclad-staff-application-security-engineer","title":"Staff Application Security Engineer","company":{"id":7915,"name":"Ironclad","domain":"ironcladapp.com","url":"https://alion.io/company/ironclad","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":{"grade":"A","score":93,"open_postings":7,"ghost_share":0,"stale_share":0.286,"repost_share":0,"time_to_fill_p50_days":45,"computed_at":"2026-10-17T05:46:00Z"}},"role":"Security","role_family":"Security","seniority":"staff","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["San Francisco, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":170000,"max":190000,"currency":"USD","period":"year","gross":null,"usd_annual":190000},"salary_estimate":null,"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":true,"technologies":[{"name":"AI Agents","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"CI/CD","optional":false},{"name":"DigitalOcean","optional":false},{"name":"GCP","optional":false},{"name":"JavaScript","optional":false},{"name":"Nessus","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"Threat Modeling","optional":false},{"name":"TypeScript","optional":false},{"name":"Checkmarx","optional":true},{"name":"Datadog","optional":true},{"name":"Grafana","optional":true},{"name":"ISO 27001","optional":true},{"name":"Kubernetes","optional":true},{"name":"Prometheus","optional":true},{"name":"Snyk","optional":true},{"name":"SOC 2","optional":true},{"name":"Terraform","optional":true},{"name":"Veracode","optional":true}],"status":"live","first_seen_at":"2026-06-17T22:23:43Z","employer_posted_date":"2026-06-17","last_verified_at":"2026-10-17T21:52:38Z","board_verified":true,"closed_at":null,"days_open":122,"trust":{"level":"ok","repost_count":0,"flags":[],"days_open":121},"description":"Build AI contracting at enterprise scale. Ship it fast.\nIronclad is building AI on one of the most consequential datasets in enterprise software: over 2 billion contracts across thousands of the world's largest organizations. Contracts run every dollar, deal, and business relationship on the planet, and the AI transformation of this space is still largely uncharted. Engineers here are building agentic solutions to problems that haven't been solved yet, in a category that's still being defined. The feedback loop is short, the data is rich, and the people closest to the work are the ones deciding what gets built next. That ability to deliver impact quickly is why the the companies at the forefront of AI choose Ironclad to manage their contracts.\nWe’re consistently recognized as a leader in the industry: a Leader in the Forrester Wave and Gartner Magic Quadrant for Contract Lifecycle Management, a Fortune Great Place to Work, and one of Fast Company’s Most Innovative Workplaces. Ironclad has also been named to Forbes’ AI 50 and Business Insider’s list of Companies to Bet Your Career On. We’re backed by leading investors including Accel, Y Combinator, Sequoia, BOND, and Franklin Templeton. For more information, visit www.ironcladapp.com or follow us on LinkedIn.\nThis is a hybrid role. Office attendance is required at least twice a week on Tuesdays and Thursdays for collaboration and connection. There may be additional in-office days for team or company events.\nIronclad is seeking an experienced Application Security Engineer with a passion for securing modern software platforms and protecting sensitive data. We are looking for someone with strong experience in automated vulnerability scanning and penetration testing to strengthen our application security program. Whether you are better at building software or better at breaking it, we are interested in hearing from you. We welcome security researchers and strong developers, as well as past security engineers.\nThis role will be responsible for conducting security assessments, identifying and mitigating risks, and implementing security best practices and process improvements across Ironclad’s Product, Platform and Engineering teams.\nRoles & Responsibilities:\nDevelop and implement secure coding practices, procedures, and standards for software development teams.\n\nConduct application security assessments and vulnerability testing to identify and mitigate risks.\n\nPerform security reviews of code changes and ensure that security issues are addressed.\n\nCollaborate with cross-functional teams to remediate software vulnerabilities and implement secure coding practices.\n\nIntegrate security review processes into Ironclad’s CI/CD pipeline.\n\nConduct threat modeling and risk analysis to protect sensitive data.\n\nProvide domain expertise on protective controls including system, network, encryption, and authentication services.\n\nWork closely with members of the SRE, Development, IT, and Security teams to drive impactful changes to Ironclad’s cybersecurity posture.\n\nWork closely with the risk and governance teams to implement compliance and security requirements.\n\nContribute to secure coding and other cybersecurity training programs.\n\nStay up-to-date with the latest security trends, vulnerabilities, and attack techniques.\n\nProvide technical leadership and mentorship to other members of the engineering and security teams.\n\nKey Skills:\nStrong proficiency in either Typescript or Javascript.\n\n3+ Years of experience working in application security or software development, preferably with SaaS companies or in regulated fields.\n\nIn-depth knowledge of application security concepts and practices, including OWASP Top 10 and SANS Top 25.\n\nExperience with security testing tools such as Burp Suite, AppScan, and Nessus.\n\nExperience operating in any cloud provider (AWS, GCP, Azure, Digital Ocean etc.).\n\nAbility to appropriately prioritize and respond to different escalations.\n\nExperience working collaboratively with cross-functional teams.\n\nStrong desire to take ownership of problems.\n\nComfort working in a rapidly evolving environment and dealing with ambiguity.\n\nExcellent communication, analytical and problem-solving skills.\n\nTeam and goal-oriented.\n\nHigh output, low ego.\n\nNice to Have:\nAI penetration testing.\n\nExperience with git and software branching and workflow strategies.\n\nExperience working with modern, microservice architectures including in Kubernetes or other containerized environments.\n\nExperience with enterprise observability platforms such as ELK, Datadog, Prometheus, Grafana, etc.\n\nKnowledge of Terraform or other infrastructure-as-code and configuration management solutions.\n\nExperience with SOC 2, ISO 27001, NIST, and CIS standards and frameworks.\n\nExperience with SAST and SCA tools such as Snyk, Checkmarx, Veracode, WhiteSource, or Black Duck.\n\nBase Salary Range: $170,000 - $190,000 offers company bonus\nThe base salary range represents the minimum and maximum of the salary range for this position based at our San Francisco headquarters. The actual base salary offered for this position will depend on numerous factors, including individual proficiency, anticipated performance, and the location of the selected candidate. Our base salary is just one component of Ironclad’s competitive total rewards package, which also includes equity awards (a new hire grant, along with opportunities for additional awards throughout your tenure), competitive health and wellness benefits, and a commitment to career growth and development.\nUS Full-Time Employee Benefits at Ironclad:\n100% health coverage for employees (medical, dental, and vision), and 75% coverage for dependents with buy-up plan options available\n\nMarket-leading leave policies, including gender-neutral parental leave and compassionate leave\n\nFamily forming support through Maven for you and your partner\n\nPaid time off - take the time you need, when you need it\n\nMonthly stipends for wellbeing, hybrid work, and (if applicable) cell phone use\n\nMental health support through Modern Health, including therapy, coaching, and digital tools\n\nPre-tax commuter benefits (US Employees)\n\n401(k) plan with Fidelity with employer match (US Employees)\n\nRegular team events to connect, recharge, and have fun\n\nAnd most importantly: the opportunity to help build the company you want to work at\n\n**UK Employee-specific benefits are included on our UK job postings\nPursuant to the San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records.","description_format":"text","description_chars":6574,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Company events","Equity","Hybrid work","Parental leave"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Application Security","Document Management","Digital Signature","Legal AI"],"lifecycle":[{"event":"open","at":"2026-06-17T22:23:43Z"}],"visa":[],"liveness":{"score":15,"band":"cold","label":"Long shot","p_open":1,"p_active":0.544,"p_room":0.28,"age_days":121,"expected_fill_days":45,"reasons":["conf:3","velocity","win:tail","crowd:"],"computed_at":"2026-10-17T05:46:00Z"},"pay":{"stated_usd_annual":190000,"is_top_pay":false},"html_url":"https://alion.io/job/ironclad-staff-application-security-engineer","json_url":"https://alion.io/job/ironclad-staff-application-security-engineer.json","meta":{"generated_at":"2026-10-18T00:04:52Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":146,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-19T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":7915},"rest":"https://alion.io/mcp/rest/get_company?id=7915"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fironclad-staff-application-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fironclad-staff-application-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fironclad-staff-application-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/ironclad-staff-application-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fironclad-staff-application-security-engineer"}]}