Security Engineer, Merge
$165-200k
5 days a week in office
Customer-facing integrations & agent tools
Be an early applicant
Customer-facing integrations & agent tools
101-200 employees
Be an early applicant
$165-200k
5 days a week in office
101-200 employees
Company mission
To make secure data access easy.
Role
Who you are
- 3–6+ years of security engineering experience with a strong focus on product or application security
- Deep familiarity with application security concepts: OWASP, common vulnerability classes, secure API design, auth and authorization patterns
- Experience conducting threat modeling and secure code reviews
- Hands-on experience with application security tooling (SAST, DAST, SCA) and integrating security into CI/CD pipelines
- Experience with and a desire to code in at least one major programming language. You should be comfortable reading and writing code, not just running scanners
- Experience in a SaaS or API-driven environment; familiarity with multi-tenant systems and the security challenges they present
- Interest in learning and supporting other areas of Security where needed
- Bonus: experience with AI/LLM security, agent security, or securing data-heavy API platforms
What the job involves
- As a Security Engineer at Merge, you will be the primary owner of product and application security across our platform
- You'll work directly alongside our Head of Security and partner closely with Engineering and Product to find and fix vulnerabilities, shape how we build securely, and ensure our API-first, AI-powered products ship with strong security guarantees
- While you don't need specific experience with all of the above, we'd expect you to be excited to learn and grow, and tackle any challenges that may come your way
- Own product and application security across Merge's platform: APIs, integrations, agent tooling, and AI-powered features
- Conduct security reviews, threat modeling, and code reviews with a focus on application-layer vulnerabilities (OWASP Top 10, injection, auth flaws, insecure deserialization, etc.)
- Drive vulnerability identification and remediation across the full SDLC, from design through deployment
- Build and mature our application security program, including SAST/DAST tooling, security testing in CI/CD, and developer security guidance
- Utilize AI to test the resiliency of our applications and systems
- Own and operate our bug bounty program end to end: triage, response, remediation, and researcher communication
- Partner with Engineering to embed secure design patterns and security review into how we ship software
- Support infrastructure and cloud security as needed, with a focus on how it intersects with our product surface
Our take
To help B2B companies navigate the increasing number of APIs needed to integrate SaaS product, Merge supplies a unified API. This provides access to dozens of payroll, recruiting, accounting, and HR platforms using a single integration layer. This way, businesses can work with a large number of APIs without compromising on efficiency.
Merge was founded in 2020 and has already built a large client base for itself, including Deed, AngelList, Ramp and Reachdesk. It has also expanded into new areas, providing support for CRM tools, ticketing systems and project management functions. With an impressively escalating annual revenue, and considerable funding at its back, the company continues to build out its product into new verticals.
Steph
Company Specialist at Welcome to the Jungle
Insights
57% employee growth in 12 months
Company
Funding (last 2 of 3 rounds)
Oct 2022
$55m
SERIES B
Nov 2021
$15m
SERIES A
Total funding: $74.5m
Company benefits
- Healthcare
- Unlimited PTO
- Parental Leave
- 401k
Company HQ
SoMa, San Francisco, CA
Leadership
Shensi Ding
(Co-Founder)Studied Computer Science at Columbia before joining Credit Suisse as an Investment Banking Analyst. Previously Chief of Staff at Expanse.
Gil Feig
(Co-Founder)A Columbia graduate who has worked for LinkedIn and Wealthfront as a Software Engineer. Previously Head of Engineering at Canvas.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 16 more jobs at Merge