Air Apps · 1 day ago
Security Engineer
San Francisco, CA
Full-time
Onsite
Mid Level
4+ years expAir Apps is a family-founded company on a mission to create the world’s first AI-powered Personal & Entrepreneurial Resource Planner. They are seeking a Security Engineer to safeguard their applications, infrastructure, and data from threats and vulnerabilities, while working closely with development and IT teams to implement secure coding practices and proactive risk mitigation strategies.
Mobile AppsSoftware
Responsibilities
Develop and implement threat modeling to identify security risks across applications and infrastructure
Conduct vulnerability scanning, penetration testing, and security assessments to detect weaknesses
Define and enforce secure coding practices in collaboration with development teams
Work with DevOps to integrate security into CI/CD pipelines and automate security testing
Monitor and respond to security incidents, conducting root cause analysis and implementing preventative measures
Ensure compliance with security standards and regulations (e.g., ISO 27001, GDPR, SOC 2)
Design and implement identity and access management (IAM) policies, encryption standards, and authentication mechanisms
Collaborate with product teams to conduct security reviews of features, APIs, and third-party integrations
Develop incident response plans, security documentation, and best practices
Stay ahead of emerging threats, vulnerabilities, and security technologies
Qualification
Required
Around 4+ years of experience in cybersecurity, application security, or security engineering
Strong knowledge of secure coding principles, OWASP Top 10, and threat modeling techniques
Experience with vulnerability scanning tools (Nessus, Qualys, Burp Suite) and penetration testing methodologies
Hands-on experience with SIEM, intrusion detection systems (IDS), and security monitoring tools
Proficiency in scripting and automation (Python, Bash, PowerShell) for security tasks
Familiarity with cloud security in AWS, Azure, or GCP, including IAM and workload protection
Knowledge of encryption protocols, network security, and API security best practices
Experience working with DevSecOps, integrating security into CI/CD pipelines
Ability to analyze security logs, detect anomalies, and mitigate potential threats
Excellent problem-solving skills and ability to communicate security concepts to non-technical stakeholders
Benefits
Apple hardware ecosystem for work.
Annual Bonus.
Medical Insurance (including vision & dental).
Disability insurance - short and long-term.
401k up to 4% contribution.
Air Conference – an opportunity to meet the team, collaborate, and grow together.
Transportation budget
Free meals at the hub
Gym membership
Company
Air Apps
Independent iOS mobile apps studio. Making people’s lives easier, empowering them to lead lives freely. Weightless, like Air.
51-200 employees
Funding
Current Stage
Growth StageRecent News
International Business Times
2025-06-18
Company data provided by crunchbase