Application Security Engineer

About the role

Fountain is seeking a motivated Application Security Engineer to join its platform team. You will work directly on the codebase that powers a global hiring platform, embedding security throughout the development lifecycle and protecting millions of applicants.

Key responsibilities

• Perform manual and automated security code reviews of TypeScript/JavaScript and Ruby repositories.
• Triage, validate, and prioritize findings from SAST, DAST, SCA scanners and external bug‑bounty programs.
• Maintain and tune security tooling in CI/CD pipelines to catch flaws early.
• Partner with software engineers to explain risks, provide remediation guidance, and promote secure coding practices.
• Assist senior engineers in threat‑modeling sessions for new feature designs.
• Support incident response by investigating and mitigating application‑level security alerts.

Required profile

• 1–3 years of experience in software development, IT, or cybersecurity (including internships or bootcamps).
• Solid understanding of web application architecture and common security flaws (OWASP Top 10, CWE).
• Ability to read, understand, and write basic code in TypeScript/JavaScript or Ruby.
• Analytical mindset with a passion for problem solving and secure design.
• Excellent written and verbal communication skills.

Required skills

• TypeScript
• JavaScript
• Ruby
• SAST, DAST, SCA tools
• CI/CD pipeline security integration
• Security code review
• Vulnerability triage and management
• Threat modeling