{"id":774347,"url":"https://alion.io/job/quanata-application-security-engineer-remote-us","title":"Application Security Engineer [Remote-US]","company":{"id":686713,"name":"Quanata","domain":"quanata.com","url":"https://alion.io/company/quanata","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":null},"role":"Security","role_family":"Security","seniority":"middle","employment_type":null,"work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"posting_text","remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":[],"countries":[],"hiring_countries":["US"],"hiring_countries_total":1,"salary":{"min":175000,"max":215000,"currency":"USD","period":"year","gross":null,"usd_annual":215000},"salary_estimate":null,"experience_years_min":4,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"OWASP ASVS","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"STRIDE","optional":false},{"name":"Threat Modeling","optional":false},{"name":"LLM","optional":true},{"name":"Prompt Engineering","optional":true}],"status":"live","first_seen_at":"2026-06-16T18:36:55Z","employer_posted_date":"2026-09-21","last_verified_at":"2026-10-31T17:18:47Z","board_verified":true,"closed_at":null,"days_open":137,"trust":{"level":"stale","repost_count":0,"flags":["stale"],"days_open":136},"description":"To help keep everyone safe, we encourage all applicants to pay close attention to protect themselves during their job search. When applying for a position online you are at risk of being targeted by malicious actors looking for personal data. Please be aware we will only reach out via email using the domain quanata.com. Anything that does not match those domains should be ignored and considered a security risk.\nAbout Us\nQuanata is on a mission to help ensure a better world through context-based insurance solutions. We are an exceptional, customer centered team with a passion for creating innovative technologies, digital products, and brands. We blend some of the best Silicon Valley talent and cutting-edge thinking with the long-term backing of leading insurer, State Farm.\nLearn more about us and our work at quanata.com\nOur Team\nQuanata, LLC is an insurance technology innovation company that engineers advanced risk prediction and prevention solutions, develops risk-focused acquisition capabilities, and builds/supports a full-stack, flexible, digital & increasingly AI-native insurance platform. This helps our primary clients, State Farm and HiRoad Assurance Company, adapt to evolving market needs. Quanata, LLC is wholly owned and funded by State Farm.\nAs a company that prioritizes an inclusive and positive culture, we believe the core of our success is in hiring talented people - across disciplines - who want to help us make a quantifiable impact.\nThe Role\nWe're looking for an Application Security Engineer to help build secure-by-default products and services across Quanata's AI-native insurance technology platform. In this role, you'll partner closely with Product, Engineering, and Security teams to identify risks early, strengthen secure development practices, and ensure our applications are resilient, scalable, and compliant.\nYou'll play a key role in embedding security throughout the software development lifecycle while helping teams move quickly and safely.\nYour Day-to-Day\nPartner with Product and Engineering teams to integrate security into application design and development\nLead threat modeling exercises and identify practical security solutions for complex systems\nConduct secure code reviews, application security assessments, and vulnerability analysis\nDevelop and implement automated security guardrails across the SDLC\nInvestigate, prioritize, and drive remediation of application security findings\nPromote secure coding practices through training, coaching, and awareness initiatives\nCollaborate with Security, Privacy, and Business Assurance teams to support compliance and risk management objectives\nCreate and maintain security standards, procedures, and best practices that scale across teams\nAbout You\nAssociate's degree or equivalent experience required; Bachelor's degree preferred\n4-6+ years of experience in software engineering, including at least 2 years focused on application security\nExperience partnering directly with software development teams to improve application security\nKnowledge of secure-by-design principles and modern application security practices\nFamiliarity with OWASP Top 10, ASVS, MASVS, and common application security frameworks\nExperience with threat modeling methodologies such as STRIDE, PASTA, or similar approaches\nWorking knowledge of cloud platforms and modern application architectures\nProficiency in at least one programming language and its security ecosystem\nStrong communication skills and the ability to influence technical and non-technical stakeholders\nComfortable operating in a fast-paced environment with shifting priorities\nBonus Points\nSecurity certifications such as CSSLP, GWEB, OSWE, or similar\nExperience working in insurance, financial services, healthcare, or other regulated industries\nAdvanced knowledge of cloud security and application security architecture\nExperience with mobile application security, QA testing, or penetration testing\nFamiliarity with AI technologies, LLM security, or prompt engineering\nExperience building scripts or automations to streamline security processes\nActive involvement in the security community through conferences, mentoring, presentations, publications, or open-source contributions\nSalary: $175,000 to $215,000*\n*Please note that the final salary offered will be determined based on the selected candidate's skills, and experience, as well as the internal salary structure at Quanata. Our aim is to offer a competitive and equitable compensation package that reflects the candidate's expertise and contributions to our organization.\nAdditional Details: \n Benefits: We provide a wide variety of health, wellness and other benefits.These include medical, dental, vision, life insurance and supplemental income plans for you and your dependents, a Headspace app subscription, monthly wellness allowance and a 401(k) Plan with a company match.\nWork from Home Equipment: Given our virtual environment- in order to set you up for success at home, a one-time payment of $2K will be provided to cover the purchase of in-home office equipment and furniture at your discretion. Also, our teams work with MacBook Pros, which we will deliver to you fully provisioned prior to your first day.\nPaid Time Off: All employees accrue four weeks of PTO in their first year of employment. New parents receive twelve weeks of fully paid parental leave which may be taken within one year after the birth and/or adoption of a child. The twelve weeks is applicable to both birthing and non-birthing parent.\nPersonal and Professional Development: We’re committed to investing in and helping our people grow personally and professionally. All employees receive up to $5000 each year for professional learning, continuing education and career development. All team members also receive LinkedIn Learning subscriptions and access to multiple different coaching opportunities through BetterUp.\nLocation: We are a remote-first company for most positions so you may work from anywhere you like in the U.S, excluding U.S. territories. For most positions, occasional travel may be requested or encouraged but is not required. Some positions might require travel per the job description provided to the employee. Employees based in the San Francisco Bay Area or in Providence, Rhode Island may commute to one of our local offices as desired. \nHours: We maintain core meeting hours from 9AM - 2PM Pacific time for collaborating with team members across all time zones. \nQuanata, LLC is an equal opportunity workplace. We are committed to equal employment opportunities regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity or Veteran status. Pursuant to the San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records.\nIf you are a San Francisco resident, please read the City and County of San Francisco's Fair Chance Ordinance notice. https://www.sf.gov/sites/https://www.sf.gov/sites/default/files/2022-12/FCO%20poster2020_0.pdf\nThis role is employed by Quanata, LLC which is a separate company in the State Farm family of companies.\nIf you require a reasonable accommodation, please reach out to your Talent Acquisition Partner for assistance.","description_format":"text","description_chars":7324,"description_truncated":false,"requirements":{"experience_years_min":4,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Apple Macbook","Home office","Life insurance","Parental leave","Professional development"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Application Security","Property & Casualty Insurance","InsurTech"],"lifecycle":[{"event":"open","at":"2026-09-11T22:26:33Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 5 · green card filings: 2","filings_12m":5,"filings_prev_12m":5,"green_card_filings_12m":2,"median_offered_wage_usd":211071,"route":null,"cap_exempt":false,"checked_at":"2026-10-29T16:27:21+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":0}],"liveness":{"score":9,"band":"cold","label":"Long shot","p_open":1,"p_active":0.338,"p_room":0.28,"age_days":136,"expected_fill_days":34,"reasons":["conf:3","win:tail","crowd:"],"computed_at":"2026-10-31T05:58:55Z"},"pay":{"stated_usd_annual":215000,"is_top_pay":true},"html_url":"https://alion.io/job/quanata-application-security-engineer-remote-us","json_url":"https://alion.io/job/quanata-application-security-engineer-remote-us.json","meta":{"generated_at":"2026-10-31T20:36:32Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":32422,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-01T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":686713},"rest":"https://alion.io/mcp/rest/get_company?id=686713"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fquanata-application-security-engineer-remote-us"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fquanata-application-security-engineer-remote-us"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fquanata-application-security-engineer-remote-us"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/quanata-application-security-engineer-remote-us\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fquanata-application-security-engineer-remote-us"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":774347}},{"tool":"search_jobs","arguments":{"company":"quanata.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":774347},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}