Latest AI JobsBrowse Jobs
Monarch Money logo

Senior Application Security Engineer

Monarch MoneyRemote (US)Engineering
Apply on company site
Salary
$180K - $215K USD
Job type
Full-time
Work mode
Remote
Posted
2 Jul 2026
Status
Open · checked 7d ago

About this role

Monarch Money is seeking a Senior Application Security Engineer to join the engineering team on a remote basis. This full-time position is ideal for an experienced security professional with a strong background in application security and AI security practices who wants to help secure a top personal finance platform.

Role Overview

As a Senior Application Security Engineer reporting to the Head of Engineering Infrastructure, the successful candidate works as a hands-on practitioner embedded across product and engineering teams. This role involves conducting application security reviews, executing vulnerability management, and enhancing AppSec and AI security measures during a period of rapid growth. The engineer collaborates directly with product teams to identify and resolve security gaps, manage SAST and DAST operations, and apply specialized AI security processes across LLM-integrated platforms.

Key Responsibilities

Conduct thorough application security reviews including threat modeling, secure code reviews, and risk assessments for new features and major product changes across the Django and Python technology stack.
Execute and improve SAST and DAST operations, covering triage, validation, and tracking of findings within CI/CD pipelines.
Manage the vulnerability backlog actively by maintaining triage criteria, tracking remediation, and partnering with engineering squads on escalation paths.
Perform and coordinate penetration testing and security assessments across web and API surfaces.
Apply and enhance AI security review processes for LLM-integrated features and agentic attack surfaces, mitigating risks such as prompt injection, data leakage, model abuse, and supply chain vulnerabilities.
Build and maintain security automations and AI-powered tooling while defining security requirements for AI workflows.
Participate in the weekly security on-call rotation.

Requirements

Five or more years of experience in security engineering with demonstrated depth in Application and AI security, including threat modeling, SAST/DAST, secure code review, and vulnerability management.
Proficiency in Python alongside a strong understanding of web application security principles like the OWASP Top 10, API security, and authentication or authorization patterns.
Hands-on familiarity with application security tooling such as Semgrep, Burp Suite, Nuclei, or equivalent solutions.
Practical knowledge of AI and ML security risks, including prompt injection, model abuse, agentic attack surfaces, and LLM supply chain risks.
High level of AI fluency, actively using artificial intelligence tools to accelerate security workflows and develop automation.

Nice to Have

Previous experience working in fintech or handling financial data security requirements.
Familiarity with compliance frameworks like SOC 2 or NIST CSF.
Cloud security experience with a preference for AWS, including IAM, container security, and ECS or EKS.
Relevant industry certifications such as OSCP, BSCP, CSSLP, CISSP, or equivalent credentials.
Background in detection engineering, incident response, red teaming, bug bounties, or broader offensive security.

Skills and Tools

Python
AWS
LLM and AI security tools
Semgrep
Burp Suite
Nuclei
CI/CD pipelines

Salary and Benefits

Annual salary ranging from $180,000 to $215,000 USD.
Competitive cash and equity compensation package.
Work from anywhere with full remote flexibility and a home office setup stipend.
Competitive benefit plans including medical, dental, vision, and 401k plan contributions for US-based employees.
Unlimited paid time off.
Monthly three-day weekends, taking the first Friday of every month off for rest and recuperation.

About the Company

Monarch Money operates a powerful personal finance platform designed to simplify financial complexity. Launched in 2021, the company has grown into a top-recommended application that helps members reach their goals. The organization functions as a fully remote team that embraces asynchronous work alongside synchronous collaboration windows.

How to Apply

To apply for this position, please visit the official Monarch Money careers page and submit your application materials.

Skills and tech stack

PythonAWSLLM

Questions candidates ask

Is this position fully remote?

Yes, this is a fully remote position welcoming applicants from the United States.

What is the salary range for the Senior Application Security Engineer role?

The salary ranges from $180,000 to $215,000 USD per year.

How many years of experience are required?

Candidates must have 5 or more years of experience in security engineering with a focus on Application and AI security.

What technologies and tools are used in this role?

The tech stack involves Python, AWS, and AI/LLM systems, along with security tools like Semgrep, Burp Suite, and Nuclei.

What benefits are provided for US employees?

US-based employees receive medical, dental, and vision benefits, 401k contribution options, a remote setup stipend, unlimited PTO, and a monthly three-day weekend.

Ready to apply?

The application is on the official Monarch Money careers page.

Apply on company site