Application Security Engineer jobs in United States
cer-icon
Apply on Employer Site
company-logo

HarbourVest Partners · 1 hour ago

Application Security Engineer

HarbourVest Partners is a global firm with a commitment to fostering a collaborative and inclusive culture. They are seeking an Application Security Engineer to lead their Application Security program, advising development teams on secure coding practices and managing security risks across applications and infrastructure.

Asset ManagementFinanceFinancial ServicesVenture Capital
check
Growth Opportunities
check
H1B Sponsor Likelynote

Responsibilities

Identify risks and areas of exposure in applications, SDLC processes, and architecture
Define guardrails, standards, and secure usage patterns for agentic AI–based coding tools, enabling engineering teams to adopt them safely while managing data exposure, code quality, and security risk
Perform secure build reviews, threat modeling, and application security testing (SAST, DAST, SCA)
Identify, assess, and support remediation of vulnerabilities in web applications and APIs
Partner with engineering teams to promote secure coding standards utilizing CI/CD pipelines and DevSecOps practices
Support audits, regulatory exams, penetration tests, and security incident response
Secure and continuously monitor third-party SaaS applications using SSPM tools, ensuring configurations, access controls, and integrations meet HarbourVest security standards
Establish metrics and reporting to track coverage and effectiveness of security processes
Enable developers through secure coding guidance, training, and tooling
And other responsibilities as required!

Qualification

Application SecuritySecure CodingThreat ModelingCI/CD PipelinesDevSecOpsOWASP Top 10Financial ServicesTrainingMonitoringCommunication SkillsCollaborationProblem Solving

Required

Solid understanding of application security principles and OWASP Top 10 risks
Experience securing web applications, APIs, and microservices in financial environments
Hands-on experience with AI-assisted coding tools such as Cursor, GitHub Copilot, and ChatGPT Codex, with an understanding of their security implications in enterprise software development
Proficiency reviewing code in at least one common language (Java, Python, C#, or JavaScript)
Familiarity with cloud platforms, containers, IaaC, and modern DevSecOps tooling
Ability to clearly communicate technical risk to both technical and non-technical collaborators
3-5 years of experience in application security or secure software development
Experience working in controlled sectors such as finance, banking, or fintech
Exposure to compliance frameworks (e.g., SOC 2, SOX, PCI DSS, GDPR)

Preferred

Bachelor's degree or equivalent experience in Computer Science, Information Security, or a related field
Security certifications such as CISSP, CSSLP, OSCP, GWAPT, or similar are a plus

Benefits

Discretionary annual bonus
Long-term reward programs
Comprehensive total rewards package
Retirement
Health
Insurance
Paid time off
Wellness programs

Company

HarbourVest Partners

company-logo
HarbourVest Partners is a private markets firm providing solutions to help clients invest in primary funds, real assets, and private credit.

H1B Sponsorship

HarbourVest Partners has a track record of offering H1B sponsorships. Please note that this does not guarantee sponsorship for this specific role. Below presents additional info for your reference. (Data Powered by US Department of Labor)
Distribution of Different Job Fields Receiving Sponsorship
Represents job field similar to this job
Trends of Total Sponsorships
2025 (3)
2023 (2)
2021 (1)
2020 (1)

Funding

Current Stage
Late Stage

Leadership Team

leader-logo
Tricia Mackechnie
Managing Director and Chief Technology Officer
linkedin
leader-logo
Aliza Firestone-Goren
Senior Vice President
Company data provided by crunchbase