Vannevar Labs

Application Security Engineer

Vannevar Labs  •  Remote  •  4 hours ago
Apply
AI can make mistakes so check important info. Chat history is never stored.

Job Description

Vannevar is a defense technology company building AI to deter our adversaries. In the 21st century, conflict moves at algorithmic speed and foresight equals firepower. Our agentic AI is purpose-built to compete with China—from cross-Strait conflict to gray zone coercion. Trained on the most mission-relevant datasets in defense, our technology models adversary behavior, simulates campaigns, and recommends the best course of action to decision makers. Our AI systems are some of the most trusted in the industry and actively used on the front lines of the Indo-Pacific to keep the peace and save lives.

Exceptional technology starts with exceptional people. Vannevar is a small agile team combining world-class engineers with veteran strategists who bring deep expertise in defense and tradecraft. We’re building a company defined by mission impact, user empathy, and disciplined growth. In just three years, we grew from $3M to $80M in ARR, achieved early profitability, and reached unicorn status—proving that disruption doesn’t require an ego, and staying power doesn’t mean standing still.

About the role

As an Application Security Engineer, you will help build security into our SaaS platform, ensuring we can quickly ship secure features to our customers. You will partner with software, DevOps, and platform teams, while coordinating with audit partners, to embed threat modeling, automated SAST/SCA/DAST, and rapid vulnerability response into every stage of our SDLC. Your work will be pivotal in protecting customer data, meeting compliance milestones, and scaling our security posture as the company grows.

What you'll do

  • Implement and deploy enterprise standard SAST, SCA, secrets-scan, DAST, and container/IaC checks in CI/CD
  • Embed with development teams to run threat models, review critical PRs, and coach secure-by-default habits.
  • Drive a shift-left vulnerability detection program to identify and remediate vulnerabilities earlier in the software development lifecycle (SDLC).
  • Coordinate with DevOps for application security issues that cross between application and infrastructure layers
  • Support incident-response for product issues and feed lessons back into code, docs, and process.

What you should have

  • 5 + years in Application / Product Security
  • Hands-on experience securing web applications and automating AppSec workflows.
  • Familiarity with DevSecOps practices and container security & patching
  • Experience with GitHub Actions, Python, TypeScript/JavaScript
  • Clear, concise communicator who can translate risk for engineers

Nice to have

  • Experience securing LLM workflows
  • Experience with NIST Risk Management Framework
  • Experience with software security at a U.S. defense contractor
  • Active Security Clearance (or ability to obtain one) and willingness to travel onsite

Benefits:

  • Health, dental, and vision insurance
  • 100% remote - work from anywhere in the US
  • 401k matching
  • Mental benefits
  • Flexible work environment - you manage your workday
  • Pet and child care reimbursement during travel
  • Unlimited PTO
Compensation
The salary range for this position is $160,000 - $210,000 + equity + 401K match. Within the range, individual pay is determined by experience, relevant education, and/or training.
Vannevar is an equal opportunity employer, and qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender perception or identity, national origin, age, marital status, protected veteran status, or disability status.
We encourage candidates from all backgrounds to apply, even if you don't feel like you're a perfect fit. If you're passionate about contributing to our mission, we'd love to hear from you!
IMPORTANT NOTICE
We are committed to protecting the privacy of all applicants. Official emails from the company will come from an @vannevarlabs.com domain. Under no circumstances will a legitimate representative from our company contact you to request passwords, financial information, or other sensitive personal data. Please be vigilant of potential scams.
Vannevar Labs

About Vannevar Labs

We're redefining how America competes. Our products are used today by friendly forces around the world to shape adversary behavior, expose malign influence, and detect illicit activity.

We started in 2019 with a belief that the public servants who put themselves in harm’s way deserve better technology. The defense status quo wasn’t cutting it, so we built a team that obsesses over real-world mission impact. We iterate fast, deploy forward, and build with end users in mind.

Since then, we’ve grown from $3M to $80M in revenue, stayed profitable, and scaled to 200+ people, while raising just $12M. We value ownership, transparency, and teamwork. We build like our work matters, because it does. And we’re building a company where the best operators in the country come together to win, grow, and do the best work of their careers.

We’re expanding our edge across cyber, economic warfare, and next-gen sensing. If you want to help America win before and beyond the battlefield, we want you. Check out our open roles at https://vannevarlabs.com/careers/.

Industry
Aviation & Aerospace
Company Size
201-500 employees
Headquarters
Palo Alto, California
Year Founded
Unknown
Social Media