Senior Application Security Engineer

Monarch Money Inc.

Job Overview

Location

Remote

Job Type

Full-time

Full Job Description

📋 Description

• Conduct application security reviews including threat modeling, secure code review, and risk assessment for new features and major product changes on Monarch’s Django/Python stack.
• Perform and improve SAST/DAST operations by triaging, validating, and tracking remediation of findings within CI/CD pipelines.
• Manage and reduce the vulnerability backlog with urgency, maintaining clear triage criteria, remediation tracking, and escalation paths in partnership with engineering squads.
• Coordinate and execute penetration testing and security assessments against Monarch’s web applications and API surfaces.
• Apply and enhance AI security review processes for LLM-integrated features and agentic systems, addressing risks such as prompt injection, data leakage, model abuse, and supply chain vulnerabilities.
• Build and maintain security automations and AI-powered tooling to improve detection, response, and prevention capabilities across the application layer.
• Define and assess security requirements for AI workflows and agentic systems to ensure alignment with organizational risk posture.
• Participate in a weekly security on-call rotation to respond to incidents and support engineering teams in real-time.
• Collaborate directly with product and engineering teams to embed security practices into the development lifecycle from design through deployment.
• Evolve Monarch’s AppSec practices as the platform scales to serve over a million users handling sensitive financial data.
• Integrate AI fluency into daily security work by actively using AI tools to accelerate threat analysis, automate repetitive tasks, and enhance security decision-making.
• Maintain awareness of OWASP Top 10, API security, authentication and authorization patterns, and apply them to secure application architecture.
• Ensure security controls are aligned with the needs of a fintech environment handling highly sensitive personal financial information.
• Contribute to the continuous improvement of security tooling including Semgrep, Burp Suite, Nuclei, and equivalent platforms.
• Support the broader Foundations security team in scaling security operations across a rapidly growing, fully remote engineering organization.

🎯 Requirements

• 5+ years in security engineering with demonstrated depth in Application and AI security — threat modeling, SAST/DAST, secure code review, and vulnerability management
• Proficiency in Python and strong understanding of web application security (OWASP Top 10, API security, auth/authz patterns)
• Hands-on experience with application security tooling — Semgrep, Burp Suite, Nuclei, or equivalents
• Familiarity with AI/ML security risks — prompt injection, model abuse, agentic attack surfaces, or LLM supply chain risk
• Transformative AI fluency — actively uses AI tools to accelerate security work and build automation

🏖️ Benefits

• Work wherever you want! As a fully remote company with no central office, we want you to work wherever you are happiest and most productive.
• Competitive cash and equity compensation in a hyper growth, early stage company 🚀.
• Stipend to set-up your ideal working environment.
• Competitive Benefit Plans for employees based on your location (e.g. in the US we offer: Medical, dental and vision benefits and the ability to contribute to a 401k plan).
• Unlimited PTO.
• 3 day weekend every month! We take off the “First Friday” every month to focus on rest, recuperation, or just having fun!

Skills & Technologies

Python

Django

AWS

REST

Senior

Remote

Degree Required

Ready to Apply?

Apply Externally

You will be redirected to an external site to apply.

AI Job Fit Analysis

Pro

See exactly how your profile matches this role — strengths, skill gaps, and what to do about them.

Monarch Money Inc.

Visit Website

About Monarch Money Inc.

Monarch Money is a personal finance platform that aggregates bank, credit, investment, and loan accounts into a single dashboard. It offers automated budgeting, net-worth tracking, cash-flow forecasting, and collaborative tools for households and financial advisors. Built with bank-level encryption and read-only connections, the service is delivered via web and mobile apps on a freemium subscription model. Founded in 2018 and headquartered in San Francisco, the company targets individuals and advisors seeking real-time, comprehensive financial oversight without manual spreadsheets.

View Company Profile

Get more remote jobs like this

Subscribe to the weekly newsletter for similar remote roles and curated hiring updates.

Weekly remote jobs and featured talent.

No spam. Only curated remote roles and product updates. You can unsubscribe anytime.