Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 128 days ago

Staff Application Security Engineer

Ironclad31 open roles

Pay
$170,000 – $190,000 a year
Where
San Francisco
Work mode
Hybrid
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowStaff Application Security EngineerIronclad · San Francisco

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Ironclad's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

12.1% of postings close within 7 days. Measured by our own scanner across the market. Ironclad postings stay open a median of 49 days.

Share of postings closed within
  1. 2.1%1 day
  2. 4.5%3 days
  3. 12.1%7 days
  4. 19.1%14 days
  5. 35.6%30 days
  6. 52.7%60 days
This job: posted 128 days ago

Ironclad median: 49 days open

The posting

Build AI contracting at enterprise scale. Ship it fast.

Ironclad is building AI on one of the most consequential datasets in enterprise software: over 2 billion contracts across thousands of the world's largest organizations. Contracts run every dollar, deal, and business relationship on the planet, and the AI transformation of this space is still largely uncharted. Engineers here are building agentic solutions to problems that haven't been solved yet, in a category that's still being defined. The feedback loop is short, the data is rich, and the people closest to the work are the ones deciding what gets built next. That ability to deliver impact quickly is why the the companies at the forefront of AI choose Ironclad to manage their contracts.

We’re consistently recognized as a leader in the industry: a Leader in the Forrester Wave and Gartner Magic Quadrant for Contract Lifecycle Management, a Fortune Great Place to Work, and one of Fast Company’s Most Innovative Workplaces. Ironclad has also been named to Forbes’ AI 50 and Business Insider’s list of Companies to Bet Your Career On. We’re backed by leading investors including Accel, Y Combinator, Sequoia, BOND, and Franklin Templeton. For more information, visit www.ironcladapp.com http://www.ironcladapp.com or follow us on LinkedIn.

This is a hybrid role. Office attendance is required at least twice a week on Tuesdays and Thursdays for collaboration and connection. There may be additional in-office days for team or company events.

Ironclad is seeking an experienced Application Security Engineer with a passion for securing modern software platforms and protecting sensitive data. We are looking for someone with strong experience in automated vulnerability scanning and penetration testing to strengthen our application security program. Whether you are better at building software or better at breaking it, we are interested in hearing from you. We welcome security researchers and strong developers, as well as past security engineers.

This role will be responsible for conducting security assessments, identifying and mitigating risks, and implementing security best practices and process improvements across Ironclad’s Product, Platform and Engineering teams.

Roles & Responsibilities:

- Develop and implement secure coding practices, procedures, and standards for software development teams.

- Conduct application security assessments and vulnerability testing to identify and mitigate risks.

- Perform security reviews of code changes and ensure that security issues are addressed.

- Collaborate with cross-functional teams to remediate software vulnerabilities and implement secure coding practices.

- Integrate security review processes into Ironclad’s CI/CD pipeline.

- Conduct threat modeling and risk analysis to protect sensitive data.

- Provide domain expertise on protective controls including system, network, encryption, and authentication services.

- Work closely with members of the SRE, Development, IT, and Security teams to drive impactful changes to Ironclad’s cybersecurity posture.

- Work closely with the risk and governance teams to implement compliance and security requirements.

- Contribute to secure coding and other cybersecurity training programs.

- Stay up-to-date with the latest security trends, vulnerabilities, and attack techniques.

- Provide technical leadership and mentorship to other members of the engineering and security teams.

Key Skills:

- Strong proficiency in either Typescript or Javascript.

- 3+ Years of experience working in application security or software development, preferably with SaaS companies or in regulated fields.

- In-depth knowledge of application security concepts and practices, including OWASP Top 10 and SANS Top 25.

- Experience with security testing tools such as Burp Suite, AppScan, and Nessus.

- Experience operating in any cloud provider (AWS, GCP, Azure, Digital Ocean etc.).

- Ability to appropriately prioritize and respond to different escalations.

- Experience working collaboratively with cross-functional teams.

- Strong desire to take ownership of problems.

- Comfort working in a rapidly evolving environment and dealing with ambiguity.

- Excellent communication, analytical and problem-solving skills.

- Team and goal-oriented.

- High output, low ego.

Nice to Have:

- AI penetration testing.

- Experience with git and software branching and workflow strategies.

- Experience working with modern, microservice architectures including in Kubernetes or other containerized environments.

- Experience with enterprise observability platforms such as ELK, Datadog, Prometheus, Grafana, etc.

- Knowledge of Terraform or other infrastructure-as-code and configuration management solutions.

- Experience with SOC 2, ISO 27001, NIST, and CIS standards and frameworks.

- Experience with SAST and SCA tools such as Snyk, Checkmarx, Veracode, WhiteSource, or Black Duck.

Base Salary Range: $170,000 - $190,000 offers company bonus

The base salary range represents the minimum and maximum of the salary range for this position based at our San Francisco headquarters. The actual base salary offered for this position will depend on numerous factors, including individual proficiency, anticipated performance, and the location of the selected candidate. Our base salary is just one component of Ironclad’s competitive total rewards package, which also includes equity awards (a new hire grant, along with opportunities for additional awards throughout your tenure), competitive health and wellness benefits, and a commitment to career growth and development.

US Full-Time Employee Benefits at Ironclad:

- 100% health coverage for employees (medical, dental, and vision), and 75% coverage for dependents with buy-up plan options available

- Market-leading leave policies, including gender-neutral parental leave and compassionate leave

- Family forming support through Maven for you and your partner

- Paid time off - take the time you need, when you need it

- Monthly stipends for wellbeing, hybrid work, and (if applicable) cell phone use

- Mental health support through Modern Health, including therapy, coaching, and digital tools

- Pre-tax commuter benefits (US Employees)

- 401(k) plan with Fidelity with employer match (US Employees)

- Regular team events to connect, recharge, and have fun

- And most importantly: the opportunity to help build the company you want to work at

**UK Employee-specific benefits are included on our UK job postings

Pursuant to the San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Ironclad's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on Ironclad's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    Ironclad's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.