{"id":3645308,"url":"https://alion.io/job/renew-home-staff-engineer-application-security-remote-us","title":"Staff Engineer, Application Security (Remote, US)","company":{"id":450010,"name":"Renew Home","domain":"renewhome.com","url":"https://alion.io/company/renew-home","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workable","truth_index":null},"role":"Industrial Engineering","role_family":"Industrial Engineering","seniority":"staff","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"posting_text","remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":[],"countries":[],"hiring_countries":["US"],"hiring_countries_total":1,"salary":{"min":170000,"max":220000,"currency":"USD","period":"year","gross":null,"usd_annual":220000},"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":true,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"AWS","optional":false},{"name":"CI/CD","optional":false},{"name":"CodeQL","optional":false},{"name":"DNS","optional":false},{"name":"Function Calling","optional":false},{"name":"GCP","optional":false},{"name":"Guardrails AI","optional":false},{"name":"IAM","optional":false},{"name":"ISO 27001","optional":false},{"name":"LLM","optional":false},{"name":"LLM Guardrails","optional":false},{"name":"Model Context Protocol","optional":false},{"name":"Nuclei","optional":false},{"name":"SOC 2","optional":false},{"name":"TCP/IP","optional":false},{"name":"Threat Modeling","optional":false}],"status":"live","first_seen_at":"2026-11-02T22:37:38Z","employer_posted_date":"2026-11-02","last_verified_at":"2026-11-05T19:20:45Z","board_verified":true,"closed_at":null,"days_open":3,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":3},"description":"Who We Are\nEveryday Electric (formerly Renew Home) is on a mission to change how we power the world by making it easier for customers to save energy and money at home as part of the largest residential virtual power plant in North America.\nWe partner with industry-leading brands to better manage residential energy for users by prioritizing efficiency, savings, and comfort - and cleaner energy for everyone.\nWe are an Equal Opportunity employer striving to create a diverse, equitable, and inclusive work environment where everyone feels that they have a voice that is heard.\nWe strongly encourage candidates to check out our website at www.everydayelectric.com to learn more about the world-changing work we are doing.\nWhat You Will Do\nSecurity strategy and leadership: Help define and drive company-wide security strategy across applications, cloud infrastructure, and AI systems. Identify our highest-impact risks and lead cross-functional initiatives to address them.\nApplication and product security: Lead security architecture reviews, threat modeling, code reviews, and security testing. Partner with engineering teams to build security into the SDLC and eliminate classes of vulnerabilities through secure-by-default patterns and guardrails.\nAI and agentic security: Define and implement security guardrails for LLM-powered applications, AI agents, coding assistants, and MCP/tool integrations, including identity, permissions, data access, secrets, sandboxing, and human approval boundaries.\nCloud and infrastructure security: Improve security across AWS/GCP, containers, CI/CD, identity and access management, and the software supply chain through scalable controls and automation.\nVulnerability management and incident response: Improve how we discover, prioritize, remediate, and detect security issues, and provide technical leadership during significant security incidents.\nCompany-wide security: Partner with Engineering, Infrastructure, IT, Legal, and other teams on security architecture, policies, compliance programs, and emerging risks.\nSecurity culture: Raise the security capabilities of the engineering organization through tooling, training, security champions, technical guidance, and mentorship.\nRequirements\n7+ years of experience in application, product, cloud, or infrastructure security, with strong hands-on security engineering experience.\nStrong software engineering skills with the ability to read, write, and review production code and design practical security improvements.\nDeep understanding of application and API security, authentication and authorization, cloud security, and modern software development and delivery.\nExperience designing scalable security architecture and secure-by-default controls across applications and cloud infrastructure.\nUnderstanding of AI and agentic security risks, including prompt injection, insecure tool use, excessive permissions, sensitive-data leakage, and risks associated with MCP and third-party AI integrations.\nProficiency in utilizing AWS security services (e.g. IAM, WAF, GuardDuty, AWS Inspector) and static and dynamic application security tools like CodeQL, Burp Suite, Zap, Nuclei.\nStrong understanding of networking, security, and core Internet protocols (e.g. TCP/IP, DNS, SMTP, SSL, distributed networks).\nDemonstrated ability to lead complex security initiatives across multiple teams, influence technical direction, and operate independently in ambiguous problem spaces.\nStrong communication skills and the ability to translate security risks into practical engineering decisions.\nExperience with AWS security services, application security tooling, SOC 2/ISO 27001, and AI-assisted security tools is a plus.\nWe know not everyone will check every box on day one. If this work excites you and you have strong experience in most of these areas, we’d love to hear from you.\nBenefits\nWhat You'll Get\nA full-time position, with a competitive salary based on experience. The base salary for this role is $170k - $220k. In addition to base compensation, this role is eligible for a target annual bonus of 15% of base salary, and participation in long-term incentive programs tied to company growth and performance. We use market data and consider your job family, background, skills, experience, and U.S. work location to determine compensation within our established pay range.\nFully remote work environment with home office set-up allowance.\nReal and lived work-life balance - Company perks include no pre-set vacation limits (with a top-down culture of taking meaningful PTO every year!), parental leave benefits, and a corporate value of working sustainably and putting families first.\nCompetitive benefits package that includes numerous health and wellness benefits.\n401(k) plan, with employer contributions to the same. \nOpportunity to work with amazing people who are passionate about their mission, thriving in a fully-remote work environment, and learning and growing every day.\nAt this time, Everyday Electric is unable to sponsor or take over sponsorship of employment visas. Candidates must be authorized to work in the United States without current or future immigration from the company, including training plans for foreign students.\nEQUAL OPPORTUNITY EMPLOYER\nIndividuals seeking employment at Everyday Electric are considered without regard to race, color, religious creed, sex, gender identification, national origin, citizenship status, age, physical or mental disability, sexual orientation, marital, parental, veteran or military status, unfavorable military discharge, or any other status protected by applicable federal, state or local law.\nWe will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation.","description_format":"text","description_chars":5939,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Home office","Parental leave"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Application Security","Smart Grid","Energy Management"],"lifecycle":[{"event":"open","at":"2026-11-02T22:37:38Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":2,"expected_fill_days":67,"reasons":["conf:2","win:early"],"computed_at":"2026-11-05T05:54:30Z"},"pay":{"stated_usd_annual":220000,"is_top_pay":true},"html_url":"https://alion.io/job/renew-home-staff-engineer-application-security-remote-us","json_url":"https://alion.io/job/renew-home-staff-engineer-application-security-remote-us.json","meta":{"generated_at":"2026-11-05T23:16:07Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":4470,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-06T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":450010},"rest":"https://alion.io/mcp/rest/get_company?id=450010"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Frenew-home-staff-engineer-application-security-remote-us"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Frenew-home-staff-engineer-application-security-remote-us"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Frenew-home-staff-engineer-application-security-remote-us"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/renew-home-staff-engineer-application-security-remote-us\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Frenew-home-staff-engineer-application-security-remote-us"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3645308}},{"tool":"search_jobs","arguments":{"company":"renewhome.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3645308},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}