{"id":198931,"url":"https://alion.io/job/myfitnesspal-application-security-engineer-2","title":"Application Security Engineer","company":{"id":99054,"name":"MyFitnessPal","domain":"myfitnesspal.com","url":"https://alion.io/company/myfitnesspal","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":null},"role":"Security","role_family":"Security","seniority":"junior","employment_type":null,"work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"posting_text","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":[],"countries":[],"hiring_countries":["US"],"hiring_countries_total":1,"salary":{"min":90000,"max":120000,"currency":"USD","period":"year","gross":null,"usd_annual":120000},"salary_estimate":null,"experience_years_min":2,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"CI/CD","optional":false},{"name":"Claude Code","optional":false},{"name":"Kubernetes","optional":false},{"name":"LLM","optional":false},{"name":"OWASP","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"Python","optional":false},{"name":"GitHub Actions","optional":true}],"status":"live","first_seen_at":"2026-09-03T22:19:25Z","employer_posted_date":"2026-09-19","last_verified_at":"2026-10-25T00:50:58Z","board_verified":true,"closed_at":null,"days_open":51,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":51},"description":"At MyFitnessPal, we believe good health starts with what you eat. We provide tools, resources and support to enable users to reach their health goals.\nWe are looking for a Security Engineer II with a focus on Application Security to join the MyFitnessPal Security team. Our users rely on MyFitnessPal to power their health and fitness journeys every day, and you will leverage your technical skills to secure the code, applications, and development processes that create the MyFitnessPal product experience. In addition to technical expertise, you'll find that your teammates value collaboration, mentorship, and inclusive environments.\nAbout the team:\nThe Productivity Engineering: Automation & Self-Service (PEAS) team is responsible for the automation, CI/CD, and self-service platforms that product teams rely on to build, test, and ship features quickly and safely.\nThe PEAS team is part of the Technology Operations (TechOps) organization, which includes IT, Infrastructure, Security, Reliability, and DevOps/DevEx disciplines. TechOps seeks to enable MyFitnessPal to \"ship with confidence\" by delivering a secure, reliable, and low-friction runway to build and operate software at scale. Within TechOps, you'll represent the Security discipline - protecting the applications and development processes that keep our mobile and backend software safe for millions of users.\nEssential Duties:\nAs a Security Engineer II, you will own the day-to-day operation of our application security vulnerability management program and act as a trusted security partner to product engineering teams. You'll triage what our tooling and researchers find, drive it to remediation, and build the automation that makes the whole program run with less manual effort. This is a hands-on technical position with real ownership and substantial opportunity for growth.\nWhat you'll be doing:\nOwn day-to-day application security vulnerability management: triage findings from SAST, SCA, DAST, and mobile security tooling, assign severity and due dates, propose remediations, and drive tickets through our SVM process to resolution\nOperate and grow our bug bounty program - scoping engagements, triaging researcher submissions, validating findings, and coordinating with vendors\nLeverage AI and agentic tooling (for example, Claude Code and agentic pipelines) to accelerate security workflows - from vulnerability triage and enrichment to automated remediation support - and help ensure our AI-assisted development practices remain secure\nBuild and maintain security automation (for example, in our SOAR platform and with Python) that normalizes vulnerability intake, drives notifications and SLAs, and produces the metrics and reporting that keep the program transparent\nPartner with product engineering teams on remediation - joining triage and refinement discussions, answering questions, and representing security as a business enabler rather than a blocker\nPerform security reviews of new features, services, and third-party integrations, providing pragmatic, risk-based guidance\nAdvocate secure coding practices and contribute to developer-facing security documentation and training\nAdminister and tune application security tooling across the SDLC, and help evaluate and implement new security technology\nSupport identity and access management workflows and the automation behind them\nQualifications to be successful in this role:\n2-4 years of experience in security engineering, application security, software engineering, or a closely related role\nUnderstanding of application security assessment techniques (e.g., SAST, DAST, SCA, penetration testing) and the steps to remediate findings\nKnowledge of secure development practices for web and mobile applications (e.g., OWASP Top 10, OWASP MASVS)\nExperience working with AI/agentic-assisted tooling (e.g., Claude Code or similar AI coding assistants, LLM-powered workflows, or agentic automation) and enthusiasm for applying it to security work\nExperience performing security triage, investigation, and vulnerability management, including communicating findings and remediation guidance to engineers\nFamiliarity with auto-scaling cloud microservices and associated technologies (e.g., containerization, Kubernetes, infrastructure as code)\nStrong communication skills, enabling collaboration across cross-functional teams, and the judgment to raise a security finding and land it as a shared problem to solve, not a fight to win\nAbility to create documentation that describes technical details clearly, including for non-technical audiences\nAbility & desire to learn new product lines and technologies quickly & efficiently\nEducation and/or certifications equivalent to BS in Computer Science or IS related field; GIAC (e.g., GWEB, GCIH), OSCP, CSSLP, Security+, or vendor-specific certifications are a plus\nPreferred Qualifications:\nExperience automating security processes (e.g., Python, SOAR platforms, workflow automation) is strongly preferred\nExperience with security scanning in CI/CD pipelines and orchestration tools (e.g., GitHub Actions) is a plus\nExperience operating or triaging for a bug bounty program is a plus\nValues you’ll model\nBe Kind and Care - build with empathy; assume positive intent; support teammates and members.\nLive Good Health - champion healthy habits and balance in how we work and what we ship.\nBe Data-Inspired - ground decisions in research and data; measure what matters.\nChampion Change - lean into ambiguity; iterate, learn, and improve continuously.\nLeave it Better than You Found It - raise quality, clarify systems, and document as you go.\nMake It Happen - bias to action; deliver impact with craft and accountability.\nThe reasonably estimated salary for this role at MyFitnessPal ranges from $90,000 - $120,000. Actual compensation is based on factors such as the candidate’s skills, qualifications, and experience. In addition, MyFitnessPal offers a wide range of comprehensive and inclusive employee benefits for this role including healthcare, parental planning, mental health benefits, annual performance bonus, a 401(k) plan and match, responsible time off, monthly wellness and technology allowances, and others.\nExciting Full-Time Employee Benefits, Perks and Culture\nFace-to-Face Connections: We value personal connections. Enjoy opportunities to meet and connect with your team members in person to help forge meaningful relationships that extend beyond the virtual realm. Teams meet as often as needed and all of MyFitnessPal gathers annually.\nFlexibility At Its Best: Achieve the work-life balance you deserve. Enjoy a flexible time-off policy with our Responsible Time Off benefit. \nGive Back: Use your volunteer days off to support what matters most to you. Each full time teammate receives 2 days per calendar year to give back to their community through service.\nMentorship Program: Take control of your career through our mentorship program where, if you’d like, you will be matched with a teammate who can help you scale your skills and propel your growth.\nFamily-Friendly Support: Embrace the journey with confidence and care. Enjoy our paid maternity and paternity leave, to provide time to balance family responsibilities with your career and take the time needed to strengthen family relationships. We understand the complexities of starting or expanding a family, which is why we provide best-in-class comprehensive assistance for fertility-related matters. \nWellness Comes First: Live Good Health is one of our core values. Receive a monthly Wellness Allowance, empowering you to focus on your physical and mental well-being by choosing from a range of wellness initiatives, including dedicated mental health days.\nCelebrate Greatness: Your hard work deserves recognition! Our reward and recognition platform empowers peers to acknowledge and reward each other for the exceptional contributions they make. \nElevate Your Health & Fitness: Get access to MyFitnessPal Premium, allowing you to take your fitness, health and wellness journey to new heights.\nUnlock Your Potential: Access our virtual learning and development library, and participate in training opportunities to continuously grow and enhance your skills. \nChampioning Inclusion: Our dedicated DEI Committee actively fosters a diverse and inclusive workplace by setting actionable goals and evaluating progress across the organization.\nHealthcare Matters: Your well-being is our priority. Take advantage of our competitive medical, dental, and vision benefits that cater to your holistic healthcare needs. Feel secure and supported on your wellness journey.\nSecure Your Future: Benefit from our retirement savings program, giving you peace of mind for your financial goals. Reach them sooner with MyFitnessPal’s competitive employer match.\nAt MyFitnessPal, our mission is to enable people to make healthy choices. And it wouldn't be possible without our team. We celebrate the unique POV that each person brings to the table and believe in a collaborative and inclusive environment. As an equal opportunity employer, we prohibit any unlawful discrimination on the basis of race, religion, military or veteran status, sex, gender, marital status, gender identity or expression, sexual orientation, national origin, age, or disability. These are our guiding ideologies and apply across all aspects of employment.\nMyFitnessPal participates in E-Verify.","description_format":"text","description_chars":9410,"description_truncated":false,"requirements":{"experience_years_min":2,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Application Security","Consumer Health Apps"],"lifecycle":[{"event":"open","at":"2026-09-04T00:54:22Z"}],"visa":[],"liveness":{"score":48,"band":"ok","label":"Likely open","p_open":1,"p_active":0.806,"p_room":0.6,"age_days":50,"expected_fill_days":60,"reasons":["conf:0","win:late","crowd:junior"],"computed_at":"2026-10-24T06:02:35Z"},"pay":{"stated_usd_annual":120000,"is_top_pay":true},"html_url":"https://alion.io/job/myfitnesspal-application-security-engineer-2","json_url":"https://alion.io/job/myfitnesspal-application-security-engineer-2.json","meta":{"generated_at":"2026-10-25T03:49:28Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":4969,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-26T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":99054},"rest":"https://alion.io/mcp/rest/get_company?id=99054"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fmyfitnesspal-application-security-engineer-2"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fmyfitnesspal-application-security-engineer-2"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fmyfitnesspal-application-security-engineer-2"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/myfitnesspal-application-security-engineer-2\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fmyfitnesspal-application-security-engineer-2"}]}