Senior Staff Application Security Engineer

Senior Staff Application Security Engineer

2 days ago Be among the first 25 applicants

Join Us at Pura—Reimagining Fragrance for the Future

At Pura, we believe life is better when it smells good. Fragrance has the unique power to transform spaces, elevate moods, and create lasting memories. But we know it can do even more. That’s why we’re pioneering the future of fragrance, combining cutting‑edge smart home technology with premium, clean scents to create personalized, meaningful experiences in every home.

We’re not just a fragrance company—we’re on a mission to change the way people experience scent. At Pura, we are redefining fragrance as a critical elementtijd nal to design, on par with color, texture, sound, lighting, and furniture. We call this Scent Design—transforming scent from an afterthought into an intentional clone, skillfulدید component of every space. By blending artistry and science, Pura allows users to design their own “scents capes” that enhance daily life and craft environments that feel as good as they smell.

Our journey began with two innovators, Richie Stapler and Bruno Lima, and their shared vision of revolutionizing how we experience fragrance. Since then, Pura has grown into a company that sells a fragrance every 3.7 seconds, partnering with iconic brands like Curio, Anthropologie, and Disney. We’ve been recognized as the Fastest Growing Company in Utah, and we are passionate about making scent a core part of life’s most memorable moments.

As a Senior Staff Application Security Engineer, you will be the primary technical authority for our application security program. লগতে এই ভূমিকা উচ্পন্ন দাই একচাইং ভোক্তা উচ্চ— গুরুত্ব র। *(আইত্যুলুা সত্যি নয়)***

When you say "hard no" policy, it’s evaluations or discrete uses... (Continue paragraph)****

* Open to remote/hybrid candidates

You will help us inspire a belief in obstepion for fract residual, etc.**

• Security Architecture & AI Integration:
  Lead the design and security review of AI‑powered features, ensuring LLM safety (prevent roof injection, data leakage, and RAG vulnerabilities).
• Secure Workflow Design (Dev Sec Ops ):
  Design and implement “secure‑by‑default” guardrails and automated security pipelines (SAST, DAST, SCA) that integrate seamlessly into Git Hub Actions and CI/CD.
• Advanced Code Auditing:
  Conduct deep‑dive manual source code reviews of complex features, focusing on business logic flaws and authorization issues that automated tools miss.
• Threat Hunting & Research:
  Lead proactive application‑level threat hunting exercises to identify anomalies and indicators of compromise (IOCs) within the Pura cloud and IoT ecosystem.
• Vulnerability Management:
  Own the end‑to‑end lifecycle of security findings, from triage scheme and repression to polishing the engineer for remediation.

• Act as a technical mentor and “Security Champion” lead for the engineering organization
  
  Anton.
• Persisted perform architectural risk analysis and threat modeling for new product launches.
• Develop custom security tooling and automation to reduce manual toil.
• Stay ahead');?> ??? sala
• Collaborate with the Director of Security to define the App Sec roadmap and track meaningful security metrics.
• Serve as a technical lead during security incidents, conducting root‑cause analysis and post‑mortem improvements.

• Experience:
  
  8+ years in Application Security or Software Engineering with a heavy security focus. At least 3 years in a Staff or Lead capacity.
• Technical Depth:
  Expert-level knowledge of web, mobile (iOS/Android), and API security. Deep familiarity with the OWASP Top 10 and SANS Top 25.
• AI Security Expertise:
  Proven experience securing LLM‑based applications and understanding AI‑specific risks (OWASP for LLMs).
• Cloud & IoT:
  Extensive experience with AWS/GCP security and securing IoT device‑to‑cloud communication.
• Coding
  
  Skills:
  
  High proficiency in at least one modern language (Node.js, Python, Go) and the ability to perform manual code reviews in a polyglot environment.
• Workflow Mastery:
  Strong experience with Infrastructure as Code (Terraform), container security (Docker/K8s), and CI/CD…