As an Application Security Engineer, you will lead security efforts for the SaaS platform, embedding security practices and responding to vulnerabilities while ensuring compliance and protecting customer data.
Our mission is to be the technology backbone for strategic competition against peer adversaries. These missions – including intelligence, information operations, special activities, and perception management – are happening today and their success or failure will determine if we go to war tomorrow.
We've been on the front lines of these missions since 2019, and have grown to support a wide range of missions across all US service branches, multiple combatant commands, partner nations, and interagency stakeholders. We deploy both hardware and software products to support people on the front lines that span collection, planning / assessments, and effects.
We've grown from $3M in run-rate revenue in 2021 to $80M in run-rate revenue today. We've been profitable since 2022 and have raised $91M in venture capital funding through Series B. We're valued at $1.5B as of 2025.
About the role
As the Founding Application Security Engineer, you will own and build the security backbone of our SaaS platform, ensuring we can ship features quickly — and safely — to our customers. You will partner with software, DevOps, and platform teams, while coordinating with audit partners, to embed threat modeling, automated SAST/SCA/DAST, and rapid vulnerability response into every stage of our SDLC. Your leadership will be pivotal in protecting customer data, meeting compliance milestones, and scaling our security posture as the company grows.
What you'll do
- Map our product attack surface, rank risks, and publish a 12-month security roadmap.
- Embed with development teams to run threat models, review critical PRs, and coach secure-by-default habits.
- Help implement and deploy SAST, SCA, secrets-scan, DAST, and container/IaC checks in CI/CD; drive MTTR on P1 vulns to < 7 days.
- Coordinate with DevOps for application security issues that cross between application and infrastructure layers
- Support incident-response for product issues and feed lessons back into code, docs, and process.
- Write customer-facing Product Security white-papers and supply compliance evidence.
Qualifications
- 5 + years in Application / Product Security
- Ability to read & write production-quality code
- Hands-on experience securing web applications and automating AppSec workflows.
- Familiarity with incident response fundamentals—log triage, forensics, retros—and a passion for eliminating root causes.
- Clear, concise communicator who can translate risk for engineers, leadership, and customers.
- Ideally experienced with AWS, Python, containers, TypeScript, Node.js, Django, PostgreSQL, and Rancher.
- Experience securing LLM workflows is a big plus
Benefits:
The salary range for this position is $160,000-$210,000 + equity + 401K match. Within the range, individual pay is determined by experience, relevant education, and/or training.
- Health, dental, and vision insurance
- 100% remote - work from anywhere in the US
- 401k matching
- Mental benefits
- Flexible work environment - you manage your workday
- Pet and child care reimbursement during travel
- Unlimited PTO
The salary range for this position is $160,000-$210,000 + equity + 401K match. Within the range, individual pay is determined by experience, relevant education, and/or training.
Vannevar Labs is an equal opportunity employer, and qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender perception or identity, national origin, age, marital status, protected veteran status, or disability status.
We encourage candidates from all backgrounds to apply, even if you don't feel like you're a perfect fit. If you're passionate about contributing to our mission, we'd love to hear from you!
IMPORTANT NOTICE
We are committed to protecting the privacy of all applicants. Official emails from the company will come from an @vannevarlabs.com domain. Under no circumstances will a legitimate representative from our company contact you to request passwords, financial information, or other sensitive personal data. Please be vigilant of potential scams.
We are committed to protecting the privacy of all applicants. Official emails from the company will come from an @vannevarlabs.com domain. Under no circumstances will a legitimate representative from our company contact you to request passwords, financial information, or other sensitive personal data. Please be vigilant of potential scams.
Top Skills
AWS
Containers
Django
Node.js
Postgres
Python
Rancher
Typescript
Similar Jobs at Vannevar Labs
Artificial Intelligence • Machine Learning • Software • Defense
Lead a cross-functional team in developing and deploying offensive cyber capabilities, focusing on customer mission problems and business growth.
Top Skills:
Cyber CapabilitiesGeospatial PlatformsSoftware Products
Artificial Intelligence • Machine Learning • Software • Defense
As a Forward Deployed Engineer, you will lead the architecture, development, and deployment of software solutions for national security missions. You will collaborate with cross-functional teams to deliver innovative software that assists government entities in deterrence and conflict management, while maintaining communication with mission owners and stakeholders.
Artificial Intelligence • Machine Learning • Software • Defense
The Deputy Head of Finance will lead M&A due diligence, optimize revenue operations, improve financial systems, and provide strategic financial insights to support growth and decision-making.
Top Skills:
Accounting SystemsFinancial ModelingRevenue Operations
What you need to know about the Charlotte Tech Scene
Ranked among the hottest tech cities in 2024 by CompTIA, Charlotte is quickly cementing its place as a major U.S. tech hub. Home to more than 90,000 tech workers, the city’s ecosystem is primed for continued growth, fueled by billions in annual funding from heavyweights like Microsoft and RevTech Labs, which has created thousands of fintech jobs and made the city a go-to for tech pros looking for their next big opportunity.
Key Facts About Charlotte Tech
- Number of Tech Workers: 90,859; 6.5% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: Lowe’s, Bank of America, TIAA, Microsoft, Honeywell
- Key Industries: Fintech, artificial intelligence, cybersecurity, cloud computing, e-commerce
- Funding Landscape: $3.1 billion in venture capital funding in 2024 (CED)
- Notable Investors: Microsoft, Google, Falfurrias Management Partners, RevTech Labs Foundation
- Research Centers and Universities: University of North Carolina at Charlotte, Northeastern University, North Carolina Research Campus
