[All remote jobs](https://jobicy.com/jobs.md)[![ANGI logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2021/09/50cccf084c34089de2274f72e18841d0.jpg)](https://jobicy.com/company/angi.md)[ANGI](https://jobicy.com/company/angi.md) # Senior Security Engineer, Application Security AI Summary Angi is hiring a Senior Security Engineer to lead application, cloud, and AI-agent security initiatives across its platform. The role owns security architecture, threat modeling, infrastructure hardening, compliance controls, and incident-response participation. It requires strong AWS and infrastructure-as-code experience, practical application-security expertise, and familiarity with OWASP, OAuth, OIDC, SAML, and security testing tools. The engineer will partner closely with product and engineering teams, review technical designs, build secure developer tooling, and mentor peers. This is a US remote role aligned to Eastern or Central time zones.[Apply for this job](#job-application)[View company](https://jobicy.com/company/angi.md)ShareRemote from[USA](https://jobicy.com/job-region/usa.md)SalaryUSD 150k–225k / yrDepartment[Cybersecurity](https://jobicy.com/categories/cybersecurity.md)EmploymentFull TimeExperienceSeniorPublished13 Nov 2026Apply before13 Dec 2026Listing views33Application actions2Application toolkit ## Make your next move. Prepare your resume, explore your fit, and draft a cover letter for this opportunity. Opportunity details ## About this role. For over 30 years, [Angi](https://jobicy.com/company/angi.md) has powered the future of the home services industry, creating an environment where homeowners and pros benefit from more jobs done well. For homeowners, our platform is a reliable way to find skilled pros. For pros, we’re a reliable business partner who helps them find the winnable work they want, when they want. For employees, we’re an amazing place to call home. We can’t wait to welcome you. Angi at a glance: * Founded in 1995 as Angie’s List and rebranded in 2021 * Global company with 9 brands in 8 countries and employees worldwide * Homeowners have turned to us for 300 million home projects and counting About the team: At Angi, security is woven into everything we build, from PCI-scoped payment flows to the AI agents now handling homeowner / pro conversations and scheduling end-to-end. The team is small and the surface is not: cloud infrastructure, applications, and a growing set of agentic AI products. You’ll own security architecture and execution across all three. While this is a remote position, we are a global company and are looking for applicants located in eastern or central time zones to align with our team’s working hours. What you’ll do: * Own security initiatives end to end across cloud infrastructure hardening and application security, including work that spans several sprints and arrives ambiguous. * Own the technical controls that InfoSec retains within compliance frameworks such as PCI DSS (e.g., ASV scanning, network security control reviews, tamper-detection monitoring). * Deploy and tune the infrastructure protecting Angi’s applications from exploitation, account takeover, and denial of service. * Drive security architecture and threat modeling for Angi’s AI agent products (voice/chat agents with calendar and account access). * Review RFCs, PRDs, and MRs from a security lens, and partner directly with product/engineering teams shipping AI-native features. You will be in the room when these are designed, not brought in after the fact. * Build the tooling and frameworks that make the secure path the easy path for Angi’s engineers – paved roads, not policy documents. * Mentor engineers within and across teams, and improve the status quo where you find it – recurring incident patterns, tooling gaps, process debt. * Actively participate in all facets of the incident response lifecycle by participating in a 24/7 on-call rotation. * Continuously evaluate and integrate AI-driven tooling into InfoSec’s own workflows. You’re expected to use AI coding/security assistants daily, not just secure them for others. Who you are: * 5+ years in security engineering, spanning at least two of: application security, cloud/infrastructure security, or enterprise security. * Hands-on with AWS and infrastructure-as-code (Terraform, CloudFormation, or equivalent); comfortable reading and contributing to product service code (Kotlin, NextJS, Python, Ruby, Scala, or Swift are preferred). * Sound build-versus-buy judgment with no allergy to either answer. You reach for what exists when it fits, and you’re comfortable wrapping, extending, or replacing it when it doesn’t. * Fluent in the OWASP Top 10 and how each is actually remediated, and in the authentication and authorization standards Angi runs on (OAuth, OIDC, SAML). * Some level of exposure to LLM/agentic system security (prompt injection, agent identity, data exfiltration via AI systems). * A daily, fluent user of AI-assisted coding/security tools. You are able to speak concretely about how you direct and verify AI output. * Strong written communication: you’ll write threat models and give written feedback on other people’s design docs and merge requests regularly. * Comfort executing the technical side of a compliance framework (PCI, SOX, or similar) – vulnerability scanning, control reviews, tamper detection is preferred. * Hands-on experience in the tool categories this work runs through – static analysis (Snyk, Veracode, Fortify), infrastructure vulnerability scanning (Qualys, Tenable, Rapid7), and penetration testing tooling (BurpSuite, OWASP ZAP) is preferred. * Container and Kubernetes experience is preferred. Compensation & Benefits * The base salary band for this position ranges from $150,000 – $225,000, commensurate with experience and performance. Compensation may vary based on factors such as geographic location. * This position will be eligible for a competitive year end performance bonus & equity package. * Full medical, dental, vision package to fit your needs. * Flexible vacation policy; work hard and take time when you need it. * Pet discount plans & retirement plan with company match (401K). * The rare opportunity to work with sharp, motivated teammates solving some of the most unique challenges and changing the world. We value diversity We know that the best ideas come from teams where diverse points of view uncover new solutions to hard problems. We welcome and value individuals who bring diverse life experiences, educational backgrounds, cultures, and work experiences. Our hiring process may utilize artificial intelligence (AI) tools to assist in candidate screening and assessment. Our AI tools are designed to complement, not replace, human decision-making. #LI-Remote Show more [Apply now >](https://jobicy.com/jobs/161957-senior-security-engineer-application-security.md) * ![Upload CV](data:image/svg+xml;base64,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) ### Upload your resume now To unlock remote work opportunities and be discovered by global employers. This job listing has been manually reviewed by the Jobicy Trust & Safety Team for compliance with our posting guidelines, including verification of the company's legitimacy, accuracy of job details, clarity of remote work policy, and absence of misleading or fraudulent content. ## Role DNA A quick view of the complexity, pace, ownership and collaboration implied by the job description. ### Job Complexity 5/5EasyHard ### Pace & Pressure 4/5RelaxedFast-paced ### Autonomy Level 5/5GuidedFull ownership ### Communication Load 5/5IndependentCollaborative AI insightThis is a senior, broad-scope security role spanning cloud, application, compliance, incident response, and emerging AI-agent security. It demands independent architectural judgment and the ability to influence engineering teams in ambiguous, high-impact situations. ## Salary analysis Estimated compensation compared with the broader US market for similar roles. Estimated job median (per year)Market rate$187,500US market range (per year)$160k–$230k0$253.00k AI insightThe yearly pay period is inferred from the job context; it was not explicitly stated by the employer. The employer discloses a base salary range of $150,000 to $225,000 USD. The posting does not explicitly state a pay cadence, but yearly compensation is inferred from the range, US location, full-time seniority, and standard US professional compensation conventions. The midpoint is $187,500 per year; a reasonable estimated US market range for a senior application security engineer is $160,000 to $230,000 per year, excluding bonus and equity. ## Core skills Skills and capabilities most closely associated with this opportunity. [Application Security](https://jobicy.com/jobs?search_keywords=Application%20Security.md)[Cloud Security](https://jobicy.com/jobs?search_keywords=Cloud%20Security.md)[AWS](https://jobicy.com/jobs?search_keywords=AWS.md)[Infrastructure as Code](https://jobicy.com/jobs?search_keywords=Infrastructure%20as%20Code.md)[Terraform](https://jobicy.com/jobs?search_keywords=Terraform.md)[Threat Modeling](https://jobicy.com/jobs?search_keywords=Threat%20Modeling.md)[OWASP Top 10](https://jobicy.com/jobs?search_keywords=OWASP%20Top%2010.md)[OAuth](https://jobicy.com/jobs?search_keywords=OAuth.md)[OpenID Connect](https://jobicy.com/jobs?search_keywords=OpenID%20Connect.md)[SAML](https://jobicy.com/jobs?search_keywords=SAML.md)[PCI DSS](https://jobicy.com/jobs?search_keywords=PCI%20DSS.md)[Vulnerability Management](https://jobicy.com/jobs?search_keywords=Vulnerability%20Management.md)[Penetration Testing](https://jobicy.com/jobs?search_keywords=Penetration%20Testing.md)[Kubernetes](https://jobicy.com/jobs?search_keywords=Kubernetes.md)[Incident Response](https://jobicy.com/jobs?search_keywords=Incident%20Response.md) Sample interview questionsHow would you incorporate security into the design of an AI agent that can access calendars and customer accounts?I would begin with threat modeling focused on agent identity, authorization boundaries, prompt injection, data exposure, and tool misuse. I would enforce least-privilege, short-lived credentials, explicit approval boundaries for sensitive actions, structured tool inputs, audit logging, and continuous adversarial testing. Describe how you would improve application security without slowing down engineering delivery. I would build paved-road controls into the development lifecycle, such as secure templates, CI-integrated scanning, dependency checks, actionable findings, and risk-based exception workflows. The goal is to make the secure choice the easiest option while reserving manual review for high-risk changes. What is your approach to prioritizing vulnerabilities found by SAST, infrastructure scanners, and penetration tests? I prioritize based on exploitability, exposure, affected assets, privilege impact, availability risk, compensating controls, and business context. I validate high-severity findings, remove false positives quickly, define remediation ownership and deadlines, and track recurring root causes rather than treating each finding independently. How have you applied AWS and infrastructure-as-code practices to strengthen cloud security? I use infrastructure-as-code to standardize secure configurations for identity, networking, logging, encryption, and workload deployment. I pair preventive policy checks with runtime monitoring, regularly review IAM privileges, and ensure changes are peer-reviewed and tested before deployment. How would you handle a suspected account-takeover incident while participating in an on-call rotation? I would first validate the alert, assess scope and active impact, and contain the threat through credential revocation, session invalidation, rate controls, or targeted blocks. I would preserve evidence, coordinate clear stakeholder updates, eradicate the root cause, and complete a post-incident review with durable preventive actions. Next step ## Apply now. Follow the employer’s application method and review Jobicy’s safety guidance before sharing personal information. Keep exploring ## Related remote jobs. * ![ANGI logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2021/09/50cccf084c34089de2274f72e18841d0.jpg) ANGI Nov 13 New ### [Senior Security Engineer, Detection & Response](https://jobicy.com/jobs/161962-senior-security-engineer-detection-response.md) For over 30 years, Angi has powered the future of the home services industry, creating an environment where homeowners and pros benefit from more jobs done well. For homeowners, our… * ![Domino Data Lab logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2026/11/2b7332248704-221.webp) Domino Data Lab Nov 13 New ### [Staff Software Engineer, Identity and Authorization](https://jobicy.com/jobs/161940-staff-software-engineer-identity-and-authorization.md) Who we are At Domino, we build solutions that help the largest, highly regulated organizations adopt AI to accelerate mission-critical use cases. Our platform integrates a streamlined model and app… * ![Domino Data Lab logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2026/11/2b7332248704-221.webp) Domino Data Lab Nov 13 New ### [Senior Software Engineer, Patch Engineering & Vulnerability Remediation](https://jobicy.com/jobs/161935-senior-software-engineer-patch-engineering-vulnerability-remediation.md) Who we are At Domino, we build solutions that help the largest, highly regulated organizations adopt AI to accelerate mission-critical use cases. Our platform integrates a streamlined model and app… * ![Rackner logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2026/11/05f1f6baeea0-221.webp) Rackner Nov 13 New ### [Application Security Engineer — Secure Mission Systems](https://jobicy.com/jobs/161922-application-security-engineer-secure-mission-systems.md) Application Security Engineer — Secure Mission Systems Location: Mainly remote, with onsite work in Laurel, Maryland, typically one day approximately every six weeks for team-wide sprint planningClearance: Active final DoD… * ![TRM Labs logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/34aa038c-221.png) TRM Labs Nov 13 New ### [Global Investigator – National Security](https://jobicy.com/jobs/161913-global-investigator-national-security.md) Build a Safer World. TRM Labs provides AI-powered intelligence solutions that help public and private sector agencies investigate and disrupt crime. TRM’s platforms enable investigators to trace illicit activity, build… * ![UpGuard logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/474a12c7-221.png) UpGuard Nov 13 New ### [Staff Security Engineer (Product & Cloud)](https://jobicy.com/jobs/161789-staff-security-engineer-product-cloud.md) Who are we? At UpGuard, we are replacing manual security bottlenecks with AI-driven precision. Fresh off a US$75M Series C, we are scaling our infrastructure to process 100 billion risk… * ![TITAN logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/08/81b82aeb-221.png) TITAN Nov 13 New ### [Chief Information Security Officer (CISO), RFA](https://jobicy.com/jobs/161782-chief-information-security-officer-ciso-rfa.md) About RFA and Titan RFA is a leading IT and cybersecurity partner to financial services firms: hedge funds, private equity, asset managers, and the firms that serve them. RFA is… * ![Nebius logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2026/06/d90c0566-221.webp) Nebius Nov 13 New ### [Detection & Response Engineer](https://jobicy.com/jobs/161755-detection-response-engineer-2.md) About Nebius: Nebius is leading a new era in cloud infrastructure for the global AI economy. We are building a full-stack AI cloud platform that supports developers and enterprises from… * ![Canonical logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/b4d068a9-221-1.png) Canonical Nov 12 New ### [Linux Cryptography and Security Engineer](https://jobicy.com/jobs/161678-linux-cryptography-and-security-engineer.md) This is a unique opportunity to use your software engineering and cryptography skills to build and maintain the security foundation that enables Ubuntu and its users to operate securely and… * ![Latent logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2026/11/c872d1ae22b7-221.webp) Latent Nov 12 New ### [Security Engineer](https://jobicy.com/jobs/161597-security-engineer-7.md) About Latent Latent is the enterprise pharmacy intelligence platform, powered by a clinical agentic engine, that enables health systems to grow their pharmacy operations and serve more patients. One engine… [Browse all jobs](https://jobicy.com/jobs.md)