
Job Overview
Location
DC
Job Type
Full-time
Category
Engineering
Date Posted
July 15, 2026
Full Job Description
đź“‹ Description
- • Meet Upside, a company that transforms brick-and-mortar commerce by using online retail sophistication to provide users with more value on their everyday purchases and brick-and-mortar businesses with new, profitable customers.
- • The company has helped millions of users earn 2 to 3 times more cashback than any other product, and hundreds of thousands of brick-and-mortar businesses earn measurable profit.
- • The Staff Application Security Engineer will report into the Director, Information Security and build relationships with technology stakeholders.
- • The role will leverage knowledge of secure code practices and payment systems to identify and remediate application vulnerabilities.
- • The individual contributor role will innovate for the AppSec team, increase the AppSec posture, and enable engineers to code safely.
- • Key responsibilities include innovating with AI, delivering security solutions to mitigate application vulnerabilities, running security code tests, and partnering with engineers to remediate unsafe code.
- • The role also involves creating threat models, engaging technology teams to review and document risks, guiding leadership on security architecture, design, and best AppSec practices, training and upskilling engineers on safe coding and vulnerability management, assisting penetration testing initiatives, and supporting administration of AWS Control Tower and IAM provisioning.
- • The ideal candidate will have 6+ years of application or product security experience, including reviewing Python code, experience with innovating and delivering solutions related to vulnerability management, deep knowledge of AWS and Lambda security architecture, and strong understanding and adoption of AI technologies.
- • The company uses various tools, including Github Suite, Python, Terraform, AWS Lambda, DynamoDB, S3, SNS, SQS, IAM, VPCs, ChatGPT, Snowflake, and SQL.
- • The role offers location flexibility, with in-office attendance required on a hybrid basis for those based in the Washington, D.C., Austin, Chicago, or NYC metropolitan regions.
- • The US base salary range for this full-time position is $210,000 - $230,000 + equity + benefits.
🎯 Requirements
- • 6+ years of application or product security experience
- • Experience with innovating and delivering solutions related to vulnerability management
- • Deep knowledge of AWS and Lambda security architecture
- • Strong understanding and adoption of AI technologies
- • Bachelor’s degree in Computer Science or Engineering highly preferred
🏖️ Benefits
- • Medical, dental, and vision coverage starting on Day 1
- • Equity (ISOs)
- • 401(k) program
- • Family planning programs + paid parental leave
- • Physical fitness and wellness memberships
- • Emotional and mental health support programs
- • Unlimited PTO + 10 paid federal holidays + our annual, week-long Winter Break
- • Flexible work environment
- • Lunch reimbursement for in-office employees
- • Employee Resource Groups
- • Learning and Development stipend
- • Transparent culture
- • Amazing mission
Skills & Technologies
See exactly how your profile matches this role — strengths, skill gaps, and what to do about them.
About Upside Services, Inc.
Upside Services provides a cash-back platform that connects consumers with nearby fuel stations, grocery stores, and restaurants. The company earns revenue through performance-based marketing agreements with merchants, who pay only when Upside drives incremental profit above baseline sales. The mobile app delivers personalized offers and processes rebates to users’ bank accounts or digital wallets. Founded in Washington, D.C., Upside uses anonymized transaction data and machine-learning models to forecast demand and set dynamic incentives, aiming to increase foot traffic and basket size for partner businesses while rewarding consumer loyalty.
Subscribe to the weekly newsletter for similar remote roles and curated hiring updates.
Newsletter
Weekly remote jobs and featured talent.
No spam. Only curated remote roles and product updates. You can unsubscribe anytime.
Similar Opportunities

NETGEAR, Inc.
8 days ago

Unilever PLC
19 days ago

Silver.com LLC
10 days ago

Latamcent
2 months ago