Senior Application Security Engineer

Responsibilities

• Design and execute greenfield AppSec initiatives across Tatari's SaaS platform from threat modeling to remediation
• Build and maintain security automation integrated into CI/CD pipelines and manage software supply chain risk
• Own container security across build and runtime
• Develop internal tooling and libraries that make secure coding easier for application engineers
• Own SAST/DAST/SCA tooling: selection, tuning, CI/CD integration, and triage
• Conduct application security reviews and threat models for new features and architectural changes
• Identify and remediate vulnerabilities across APIs, services, and data pipelines
• Partner with Engineering teams to establish secure coding standards and provide hands-on guidance
• Assess and mitigate LLM-introduced risks in product features
• Integrate agentic tooling into AppSec workflows to reduce toil
• Contribute to security incident response when application-layer issues are involved

Requirements

• Production Python experience
• Significant hands-on application security experience in a SaaS environment
• Working knowledge of OWASP Top 10, API Security Top 10, ASVS, SPVS, and AISVS
• Threat modeling experience with Product and Engineering teams
• Experience building security tooling or automation
• Familiarity with AWS and Kubernetes security controls
• Knowledge of LLM attack surfaces and mitigation
• Experience reviewing API designs for auth, injection, and data exposure risks
• Experience building or maturing an AppSec program from scratch

Benefits

• Total compensation between $165,000-$190,000
• Equity compensation
• Health insurance coverage for you and your dependents
• 401K, FSA, and commuter benefits
• $150 monthly spending account
• $1,000 annual continued education benefit
• $500 Newbie Productivity Perk
• Unlimited PTO and sick days
• Monthly Company Wellness Day Off
• Snacks, drinks, and catered lunches at the office
• Team building events

About the Company

Tatari is on a mission to revolutionize TV advertising through the intelligent application of AI and machine learning. The platform combines sophisticated media buying with proprietary analytics to turn TV advertising into an automated, digital-like experience.