Senior Application Security Engineer, Sardine
CA$175-215k
+ Equity
Fraud prevention & compliance infrastructure
Be an early applicant
Fraud prevention & compliance infrastructure
101-200 employees
Be an early applicant
CA$175-215k
+ Equity
101-200 employees
Company mission
To remove the friction and risks associated with high velocity money movement, from banks and cards through to digital wallets and crypto.
Role
Who you are
- 7+ years of professional experience in an application security, product security, or offensive security role
- Deep understanding of common application vulnerabilities, such as those listed in the OWASP Top 10, and their mitigation techniques (e.g., Cross-Site Scripting (XSS), SQL Injection, Cross-Site Request Forgery (CSRF), Insecure Deserialization)
- Strong proficiency in reading and auditing code in at least one of the following languages: Python, Go, or JavaScript/TypeScript
- Hands-on experience with security tools for SAST, DAST, IAST, and SCA
- Solid understanding of security principles for cloud environments (GCP & AWS) and containerized services (Docker, Kubernetes)
- Proven experience integrating security into various stages of the SDLC
- Strong analytical, problem-solving, and incident response skills
- Excellent communication and interpersonal skills, with the ability to effectively interact with technical and non-technical stakeholders
What the job involves
- As an Application Security (AppSec) Engineer at Sardine, you will play a critical role in ensuring the security and integrity of our services
- You will be a key security partner for our development teams, embedding security principles directly into the Software Development Lifecycle (SDLC)
- This is a hands-on role for a motivated individual who is passionate about proactively identifying and mitigating security risks, building secure systems, and fostering a strong security culture
- You will be instrumental in protecting our company and our customers' data from emerging threats
- Perform security code reviews, vulnerability assessments, and penetration tests on our web applications, mobile applications, and APIs
- Integrate and manage security tools within our CI/CD pipelines, including Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), and Software Composition Analysis (SCA)
- Lead and conduct threat modeling exercises for new features and services to identify potential security risks in the design phase
- Triage, validate, and prioritize vulnerabilities discovered through automated tools, manual testing, and external bug bounty programs
- Collaborate with engineering and product teams to design secure solutions and provide expert guidance on remediation strategies for identified vulnerabilities
- Develop and maintain security standards, best practices, and documentation for our development teams
- Manage security training to educate developers on secure coding practices and emerging threats
- Develop custom scripts and automation to enhance our security testing capabilities and streamline security operations
- Assist in incident response activities related to application security events
Our take
Identity and payment fraud is one of the biggest dangers facing online businesses. Sardine is setting out to solve this problem by building the first zero-day fraud prevention technology.
Sardine's technology traces intrinsic behaviour patterns to identify so-called "bad actors" online, and detects fraudsters using machine-learned fraud scores and user behavior biometrics.
The company calls itself the world's first FaaS (Fraud Detection as a Service), and its solutions are already drawing business from next-gen crypto and financial service institutions. Onboarding these institutions and scaling its customer base at pace will ensure that Sardine maintains its frontrunner position.
Freddie
Company Specialist at Welcome to the Jungle
Company
Funding (last 2 of 4 rounds)
Feb 2025
$70m
SERIES C
Sep 2022
$51.5m
SERIES B
Total funding: $145.6m
Company benefits
- Generous equity compensation
- Work from anywhere: Remote-first Culture
- Unlimited paid time off and minimum 2 weeks/year of mandatory vacation
- 100% of health insurance, dental, and vision coverage for employees and 50% for dependents
- 4% matching in 401k
- Company-wide offsites, the last one was at Miami
- MacBook Pro delivered to your door
- One-time stipend to set up a home office — desk, monitors, etc
- Monthly meal stipend
- Annual fitness allowance
- Unlimited access to an expert financial advisory
Company HQ
SoMa, San Francisco, CA
Leadership
Soups Ranjan
(Co-Founder & CEO)Previously worked as Director of Data Science & Risk at Coinbase, and was Head of Crypto at Revolut.
Zahid Shaikh
(Co-Founder & Head of Product)Previously worked as a Senior Product Manager at both PayPal and Uber, and was Senior Product Owner at Revolut.
Share this job
View 11 more jobs at Sardine