Application Security Engineer

About Sequester

Sequester is a privacy-first encrypted vault for personal photos and videos. We build software where security, reliability, and user trust are product features???not afterthoughts.

About this role

You will embed security into Sequester's SDLC???reviewing features, testing APIs and mobile surfaces, and helping engineers ship fast without shipping exploitable code.

What you will do

• Perform threat modeling and security design reviews for new product features
• Run DAST/SAST workflows, triage findings, and track remediation to closure
• Partner with mobile and backend teams on secure auth, storage, and crypto usage patterns
• Maintain security requirements for third-party SDKs and dependency upgrades
• Deliver lightweight security training and office hours for engineering squads

What we are looking for

• Application security experience across mobile (Flutter/iOS/Android) and REST APIs
• Hands-on with OWASP ASVS/Mobile Top 10 and common tooling (Burp, semgrep, etc.)
• Pragmatic collaborator who can say "no" with alternatives, not blockers
• Relevant certifications (OSCP, GWAPT) or equivalent demonstrated skill

Location

Remote-friendly. We hire globally and collaborate async-first across time zones.