Senior Security Engineer, Application Security at Kikoff

Department: Engineering

Compensation

$268,000 – $321,000/yr

Location: San Francisco, California
Type: Full-time
Level: senior
Posted: Sep 29, 2026

Description

Kikoff is hiring an Application Security Engineer to shape and execute its application security roadmap across web, mobile, and API surfaces. The role owns secure software development lifecycle practices, secure code review, threat modeling, vulnerability management, penetration testing, bug bounty programs, authentication and authorization systems, API and mobile security, AI-assisted code review, and security tooling. It requires at least six years of security engineering experience, production coding ability, and experience with authentication, APIs, mobile applications, and regulated fintech environments. The base salary range is $268,000 to $321,000 USD.

Required Skills

Application security
Secure code review
Threat modeling
Vulnerability management
Authentication
API security
Mobile security
Penetration testing
Bug bounty
CI/CD
SAST
SCA
DAST
MFA
Session management

Additional Information

Required Previous Experiences: 6+ years of security engineering experience with hands-on application security, secure code review, threat modeling, vulnerability triage, and remediation at scale
Experience designing and shipping authentication and authorization systems, including OAuth/OIDC, session management, MFA, and account recovery
Hands-on experience with modern application security tooling, including SAST, SCA, DAST, secrets scanning, and CI/CD integration
Experience securing REST/GraphQL APIs and native mobile applications
Experience running or building a penetration testing or bug bounty program
Experience in a fintech regulated environment involving PCI-DSS, SOC 2, or similar
Preferred Qualifications: Experience securing LLM-backed product features or agentic workloads in production
Experience with fraud and abuse defense, including bot detection, credential stuffing mitigation, and device signals
Experience starting security champions or developer education programs
Experience with supply chain security, including dependency provenance, artifact signing, and build integrity
Consumer fintech or financial services background