Security Engineer, Application Security

📋 Description

• • As a Security Engineer, Application Security at Mercor, you will own the application security function for a high-growth AI-powered platform serving over 300,000 experts and enterprise clients, where securing the application layer is the top priority due to the sensitivity of AI training data and model interactions.
• • You will embed within the software development lifecycle to conduct PR-level code reviews for authentication bypasses, injection flaws, and business logic vulnerabilities; build and integrate SAST/DAST tools into CI/CD pipelines; design vulnerability management processes based on real-world exploitability; establish secure coding standards; create threat models for AI data pipelines and multi-tenant systems; and operate the bug bounty program by triaging HackerOne reports and driving remediation to closure.
• • Mercor is a profitable Series C company valued at $10 billion, partnering with leading AI labs and enterprises to advance human-in-the-loop AI development through a global talent network; the company operates with an in-person-first culture (five days per week) in San Francisco, New York, or London, emphasizing deep collaboration between engineers, researchers, and AI innovators.
• • In this role, you will gain hands-on experience applying AI to security workflows—using LLMs to accelerate threat modeling and code analysis—while building scalable AppSec infrastructure that influences security practices across a rapidly evolving AI platform, positioning you at the forefront of AI-native application security.