As an Application Security Engineer, you will lead security efforts for the SaaS platform, embedding security practices and responding to vulnerabilities while ensuring compliance and protecting customer data.
Our mission is to be the technology backbone for strategic competition against peer adversaries. These missions – including intelligence, information operations, special activities, and perception management – are happening today and their success or failure will determine if we go to war tomorrow.
We've been on the front lines of these missions since 2019, and have grown to support a wide range of missions across all US service branches, multiple combatant commands, partner nations, and interagency stakeholders. We deploy both hardware and software products to support people on the front lines that span collection, planning / assessments, and effects.
We've grown from $3M in run-rate revenue in 2021 to $80M in run-rate revenue today. We've been profitable since 2022 and have raised $91M in venture capital funding through Series B. We're valued at $1.5B as of 2025.
About the role
As the Founding Application Security Engineer, you will own and build the security backbone of our SaaS platform, ensuring we can ship features quickly — and safely — to our customers. You will partner with software, DevOps, and platform teams, while coordinating with audit partners, to embed threat modeling, automated SAST/SCA/DAST, and rapid vulnerability response into every stage of our SDLC. Your leadership will be pivotal in protecting customer data, meeting compliance milestones, and scaling our security posture as the company grows.
What you'll do
- Map our product attack surface, rank risks, and publish a 12-month security roadmap.
- Embed with development teams to run threat models, review critical PRs, and coach secure-by-default habits.
- Help implement and deploy SAST, SCA, secrets-scan, DAST, and container/IaC checks in CI/CD; drive MTTR on P1 vulns to < 7 days.
- Coordinate with DevOps for application security issues that cross between application and infrastructure layers
- Support incident-response for product issues and feed lessons back into code, docs, and process.
- Write customer-facing Product Security white-papers and supply compliance evidence.
Qualifications
- 5 + years in Application / Product Security
- Ability to read & write production-quality code
- Hands-on experience securing web applications and automating AppSec workflows.
- Familiarity with incident response fundamentals—log triage, forensics, retros—and a passion for eliminating root causes.
- Clear, concise communicator who can translate risk for engineers, leadership, and customers.
- Ideally experienced with AWS, Python, containers, TypeScript, Node.js, Django, PostgreSQL, and Rancher.
- Experience securing LLM workflows is a big plus
Benefits:
The salary range for this position is $160,000-$210,000 + equity + 401K match. Within the range, individual pay is determined by experience, relevant education, and/or training.
- Health, dental, and vision insurance
- 100% remote - work from anywhere in the US
- 401k matching
- Mental benefits
- Flexible work environment - you manage your workday
- Pet and child care reimbursement during travel
- Unlimited PTO
The salary range for this position is $160,000-$210,000 + equity + 401K match. Within the range, individual pay is determined by experience, relevant education, and/or training.
Vannevar Labs is an equal opportunity employer, and qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender perception or identity, national origin, age, marital status, protected veteran status, or disability status.
We encourage candidates from all backgrounds to apply, even if you don't feel like you're a perfect fit. If you're passionate about contributing to our mission, we'd love to hear from you!
IMPORTANT NOTICE
We are committed to protecting the privacy of all applicants. Official emails from the company will come from an @vannevarlabs.com domain. Under no circumstances will a legitimate representative from our company contact you to request passwords, financial information, or other sensitive personal data. Please be vigilant of potential scams.
We are committed to protecting the privacy of all applicants. Official emails from the company will come from an @vannevarlabs.com domain. Under no circumstances will a legitimate representative from our company contact you to request passwords, financial information, or other sensitive personal data. Please be vigilant of potential scams.
Top Skills
AWS
Containers
Django
Node.js
Postgres
Python
Rancher
Typescript
Similar Jobs at Vannevar Labs
Artificial Intelligence • Machine Learning • Software • Defense
The Mission Development Lead identifies DoD mission groups for technology deployment, scopes and implements pilot projects, and expands successful pilots into larger initiatives, ensuring stakeholder engagement and project success.
Artificial Intelligence • Machine Learning • Software • Defense
The Mission Success Lead will oversee technology deployments for defense partners, ensuring user needs are met and expectations exceeded. Responsibilities include delivering capabilities, understanding mission sets, and collaborating with cross-functional teams.
Top Skills:
Saas Software
Artificial Intelligence • Machine Learning • Software • Defense
As a Senior Full Stack Engineer, you'll develop applications for physical sensors, integrate sensor data, and contribute to the sensing platform's direction with a cross-functional team.
Top Skills:
JavaScriptNon-Relational DatabasesReactRelational Databases
What you need to know about the Vancouver Tech Scene
Raincouver, Vancity, The Big Smoke — Vancouver is known by many names, and in recent years, it has gained a reputation as a growing hub for both tech and sustainability. Renowned for its natural beauty, the city has become a magnet for professionals eager to create environmental solutions, and with an emphasis on clean technology, renewable energy and environmental innovation, it's attracted companies across various industries, all working toward a shared goal: advancing clean technology.
