Staff Application Security Engineer

About the role

Upside is looking for a Staff Application Security Engineer to own and scale our application security program across mobile, web, and cloud systems. You will report to the Product Security Manager and collaborate with Cloud Security and Engineering teams to drive vulnerability management, build security guardrails, and secure our AI-driven workflows. This role is ideal for someone with a product engineering background who can translate security requirements into actionable guidance for developers.

Responsibilities

• Own Upside's application security program, the standards, the vulnerability management pipeline, and the guardrails that stop entire classes of defects from coming back
• Drive vulnerability management outcomes by triaging and tuning findings from scanning, code review, and our annual penetration test, then partnering with engineering teams to get fixes shipped and verified
• Lead application security reviews and threat models for high-impact work across mobile, web, and backend systems, and document risk decisions with clear mitigation plans
• Review and threat model agentic AI workflows, and define security controls for tool use, data access, and action execution
• Build and improve the automation that triages findings, prioritizes them with service context, and produces remediation guidance engineers can act on
• Build guardrails that scale beyond our team; repository baselines, required checks in GitHub, secure-by-default patterns for AWS workloads, reusable templates, and a security champions program

Required skills

• Application Security
• Product Security
• Python
• Threat Modeling
• Secure Design
• AWS Security
• CI/CD Security
• GitHub Actions

Benefits

• Medical, dental, and vision coverage
• Equity (ISOs)
• 401(k) program
• Family planning programs
• Paid parental leave
• Physical fitness and wellness memberships
• Emotional and mental health support programs
• Unlimited PTO
• Lunch reimbursement
• Learning and Development stipend

About the Company

Upside transforms brick-and-mortar commerce by using online retail sophistication to provide users with value on everyday purchases and help businesses earn profitable customers. Billions of dollars in commerce run through the platform annually, supporting retailer partners, consumers, and sustainability initiatives.