Staff/Principal Application Security Engineer

📋 Job Overview

Binti builds software for state and county government agencies, focusing on reinventing social services. We started in child welfare, with the mission of helping every child have a safe, loving, and stable family. To date, we’ve helped approve more than 100,000 families to foster or adopt, and we support over 49% of the nation’s child welfare system. We have expanded our product offerings in child welfare, moving more to the root of the problem, helping families stay together and avoid separation, and are now expanding horizontally across other areas in social services.

Binti is a for-profit, mission-driven software company based in San Francisco, CA. Investors include Founders Fund, First Round Capital, Kapor Capital, and others. We’re a team of ~90 people and growing quickly. We care about creating a workplace where everyone feels welcome and can bring their full self to work. We have a huge, ambitious vision to rewire government to be more effective in expanding opportunities for people around the world, and we are looking for mission-driven, high-empathy, high-performance, and low-ego team members to join us on our exciting journey towards that vision.

🏢 About Binti

As Binti's first Principal Security Engineer (Applications focused), reporting to our CTO, you will play a critical role in ensuring the security and integrity of our software applications. You will work alongside Binti’s full-stack engineers, contribute to security controls in our software, identify and address potential security vulnerabilities, implement best practices, and uphold secure coding standards.

🎯 The Role

You will be responsible for conducting security assessments, setting direction for Binti's security posture, responding to incidents, improving security architecture, setting security standards, and sharing expertise to foster a security-aware culture.

✅ Key Responsibilities

• Conduct holistic security assessments, including regular security reviews, code audits, penetration testing, and threat modeling.
• Help Binti chart a specific and pragmatic course of action to achieve a strong security posture.
• Respond promptly to security incidents, collaborate with engineers on-call, and provide detailed post-event analyses.
• Identify, design, and implement technologies to enhance security automation during the software development lifecycle.
• Lead efforts to design and implement secure coding standards and best practices across the development lifecycle.
• Stay up to date on the latest security threats, vulnerabilities, and industry best practices.
• Act as Binti’s expert on application security matters, providing mentorship to development teams.
• Represent the Security team to other Binti teams and Binti leadership.

📌 Required Qualifications

• Proven experience as an Application Security Engineer or in a similar role.
• Strong technical background with experience in full-stack development, cloud computing, and scalable architecture.
• Proficiency in one or more OOP coding languages (Ruby, Python, Java, etc).
• Strong understanding and knowledge of web application security principles, common vulnerabilities, and best practices.
• Excellent communication skills with the ability to convey complex security concepts to non-technical stakeholders.
• Focused on keeping the company secure while ensuring the team can still ship products and deliver value to customers and users.
• Experience cultivating a security-aware development culture that scales through mentorship and automation.
• A genuine interest in leveraging technology for social impact.

🎁 Benefits

Compensation: $240K – $330K • Offers Equity

⭐ Desirable Experience

• Experience with security automation tools and AI-driven security solutions.
• Knowledge of compliance frameworks such as SOC 2 Type II and HIPAA.
• Experience with bug bounty programs and engaging external security researchers.

🛂 Visa & Eligibility

No specific visa or eligibility information provided.