Staff Application Security Engineer, Webflow
$154-247k
Salary dependent on US locations. Canada applicants: CAD 199,000 - CAD 280,000. + Eligible to participate in Webflow's company-wide bonus program & Equity
More information about location
Webflow is the way to design, build, and launch powerful websites visually — without coding
Posted today
Webflow is the way to design, build, and launch powerful websites visually — without coding
501-1000 employees
Posted today
$154-247k
Salary dependent on US locations. Canada applicants: CAD 199,000 - CAD 280,000. + Eligible to participate in Webflow's company-wide bonus program & Equity
More information about location
501-1000 employees
Company mission
To bring development superpowers to everyone.
Role
Who you are
- BA/BS degree or equivalent experience
- You bring 7+ years of application security experience, including hands-on software development, and have operated as a technical authority in securing high-complexity, large-scale applications
- You have deep expertise in secure software design, secure coding, and modern web application security, with a proven ability to identify security design flaws and complex business-logic vulnerabilities, and to drive risk-based remediation with engineering teams
- You regularly lead threat modeling efforts, conduct and oversee advanced penetration testing, and manage third-party pentests, ensuring findings are clearly documented, communicated, and remediated to completion
- You have designed, implemented, and evolved software supply chain security programs, and have owned or led bug bounty programs and major security tooling initiatives, shaping strategy rather than acting solely as a contributor
- You have implemented and improved Secure Development Lifecycle (SDLC) processes at scale, including planning, automation, and cross-org communication, influencing how multiple teams build and ship software securely
- You have driven multi-quarter application security roadmaps and complex security programs, partnering with engineering, product, and platform teams to deliver durable security outcomes
- You have led security initiatives within large-scale solutions, including designing and delivering security features directly into applications (e.g., authorization models, security controls, or admin-level protections) in close collaboration with engineering and partner orgs
- You have experience using and building security solutions that leverage agentic AI, including applying AI coding agents to scale security reviews, detection, and automation responsibly
- You have participated in and led response efforts for application security incidents, from triage and containment through remediation and post-incident improvements
- You actively mentor and elevate other application security engineers, and help foster strong security practices and judgment across engineering organizations
- You are passionate about security, continuously learning, and able to clearly explain complex security concepts to technical and non-technical partners to drive alignment and action
- Stay curious and open to growth — actively building fluency in emerging technologies like AI to unlock creativity, accelerate progress, and amplify impact
What the job involves
- We’re looking for a Staff Application Security Engineer to help us level up Webflow’s secure development practices ranging from secure coding, tooling, and improving procedures
- Reporting to the Manager, Application Security
- Collaborate with the Webflow engineering team to secure Webflow’s web application platform and ecosystem
- Bring security best practices to the software development lifecycle
- Work as part of a team to champion security standards while balancing business strategies and requirements
- Support Webflow’s security current and future compliance frameworks
- Work to find security vulnerabilities through grey-box techniques, and propose solutions at the architecture and code level to mitigate findings
- Contribute code and architecture improvements to enable security within Webflow’s application for engineers
- Cross-train entry and mid-level application security engineers
- In addition to the responsibilities outlined above, at Webflow we will support you in identifying where your interests and development opportunities lie and we'll help you incorporate them into your role
Application process
- Application deadline: applications accepted on an ongoing basis until position is closed and filled
- If you are extended an offer, that offer may be contingent upon your successful completion of a background check, which will be conducted in accordance with applicable laws. We may obtain one or more background screening reports about you, solely for employment purposes
Our take
Webflow is an AI-native web experience platform that enables teams to design, build, manage, and optimize high-performing digital experiences across the entire website lifecycle — from creation to conversion — without relying on fragmented tools or constant developer handoffs.
Unlike traditional website builders or legacy CMS platforms, Webflow combines visual development, content management, optimization, analytics, localization, governance, and enterprise-grade hosting into a single, integrated system. This allows marketing, design, development, and growth teams — and increasingly AI agents — to collaborate in one shared environment while maintaining brand consistency, security, and control.
Built for a world where websites must perform for both humans and AI systems, Webflow helps organizations stay discoverable and relevant as search, personalization, and content consumption evolve. Native AI capabilities are embedded directly into core workflows, accelerating everything from site creation and content updates to experimentation, personalization, and AEO (AI Engine Optimization).
Today, over 3,000 organizations — from startups and agencies to global enterprises including Dell, Spotify, Dropbox, and Upcwork — use Webflow to build brand-forward digital experiences that drive measurable business results. With a strong partner ecosystem, enterprise adoption momentum, and more than $330M in funding, Webflow is redefining how modern teams build and scale on the web.
Rather than replacing developers, Webflow shifts development effort to where it matters most — freeing teams to move faster, operate more efficiently, and evolve their digital presence without replatforming as their needs grow.
Steph
Company Specialist at Welcome to the Jungle
Insights
Company
Funding (last 2 of 5 rounds)
Mar 2022
$120m
SERIES C
Jan 2021
$140m
SERIES B
Total funding: $335.1m
Company benefits
- Modern & inclusive healthcare coverage
- 401K and financial planning
- Flexible paid time off
- Annual retreat and offsites
- WFH Office setup budget
- Health and wellness stipend
- Remote work reimbursements for phone & wifi
- Webflow subscription discount
- Remote-first flexibility
Company values
- Build Lasting Customer Trust
- Win, Together
- Reinvent Ourselves
- Deliver with Speed, Quality, and Craft
Company HQ
Financial District, London
Articles
Leadership
Vlad Magdalin
(Co-Founder & Chairman)Vlad Magdalin is Webflow's co-founder and Chief Vision Officer, leads the vision for a more accessible, expressive, AI-powered web, and never misses a chance to nerd out about great design.
Sergie Magdalin
(Co-Founder)Sergie spent 4 years as a freelance Graphic Designer before joining NameMuir Skate as a Web & UX Designer.
Linda Tong
(CEO)Linda became CEO in 2024 after serving as Webflow’s President and COO. She’s shaping the next era of the web and leads with a people-first approach grounded in clarity, trust, and learning.
Adrian Rosenkranz
(Chief Revenue Officer)CRO at Webflow, guiding teams that support customers at every step. He’s a seasoned GTM leader who believes AI should amplify creativity—and that strong, people-first teams drive meaningful growth.
Rachel Wolan
(Chief Product Officer)Webflow’s CPO and a builder at heart, Rachel leads product, and design teams with creativity and clarity. With 20+ years of experience, she’s focused on scaling AI-native products that empower people.
Allan Leinwand
(Chief Technology Officer)Webflow’s CTO with a passion for empowering builders. Former tech leader at Shopify, Slack, and ServiceNow, he’s spent his career scaling platforms that shape how people work, create, and connect.
Craig Mestel
(Chief Financial Officer)Webflow’s CFO, known for scaling teams, leading IPOs, and making sense of complexity with data. He’s at his best in high-growth environments where he can build, mentor, and help teams win together.
Mike Podobnik
(SVP, People)Webflow’s SVP of People, known for scaling global teams and shaping cultures where people do their best work. He brings clarity, accountability, and deep partnership to every stage of growth.
Diversity, Equity & Inclusion at Webflow
Ulysses Smith (Diversity, Equity & Inclusion Lead)
- Webflow exists so anyone can bring ideas to life on the web. The same belief drives how we build our team. Diverse perspectives spark new ideas, and when everyone's empowered to create, we all Flow Forward faster. The web is for everyone, and so is the team building it.
- Behind any exceptional web experience is an effort to bring in diverse, unique perspectives that understand how different people interact with the web (and the world). We’re committed to better understanding the people we work with and build for. Our work is never done — but here’s how we’re doing so far: https://webflow.com/company/diversity-equity-inclusion
- Webflow has eight identity-based Employee Resource Groups (ERGs) that we call our Flow Communities.They're our spaces to connect, collaborate, and lead together. They bring together employees who share a common identity, lived experience, or allyship interest to foster inclusion, spark innovation, and shape a culture of belonging across our global teams. Our Flow Communities include: 1️⃣ Asians@Webflow 2️⃣ Blackflow 3️⃣ Caregivers@Webflow 4️⃣ Disability@Webflow 5️⃣ Latinoflow 6️⃣ Queerflow 7️⃣ Webflow Vets 8️⃣ Women@Webflow
- “Fostering a diverse and inclusive culture at Webflow is imperative. It encourages new ways of thinking and collaboration, helping us better understand each other and who we’re serving. By valuing varied perspectives and experiences, we become more creative, better at problem-solving, and engage in richer discussions, ultimately leading to stronger business outcomes.” - Linda Tong, Webflow CEO
Share this job
View 38 more jobs at Webflow