Application Security Engineer

Responsibilities

• Partner with Product and Engineering teams to integrate security into application design and development
• Lead threat modeling exercises and identify practical security solutions for complex systems
• Conduct secure code reviews, application security assessments, and vulnerability analysis
• Develop and implement automated security guardrails across the SDLC
• Investigate, prioritize, and drive remediation of application security findings
• Promote secure coding practices through training, coaching, and awareness initiatives
• Collaborate with Security, Privacy, and Business Assurance teams to support compliance and risk management objectives
• Create and maintain security standards, procedures, and best practices that scale across teams

Requirements

• Associate's degree or equivalent experience
• 4–6+ years of experience in software engineering
• 2+ years focused on application security
• Experience partnering with software development teams
• Knowledge of secure-by-design principles
• Familiarity with OWASP Top 10, ASVS, and MASVS
• Experience with threat modeling methodologies (STRIDE, PASTA, etc.)
• Working knowledge of cloud platforms and modern application architectures
• Proficiency in at least one programming language
• Strong communication and stakeholder influence skills

Preferred Qualifications

• Security certifications (CSSLP, GWEB, OSWE)
• Experience in insurance, financial services, or healthcare
• Advanced knowledge of cloud security and application security architecture
• Experience with mobile application security, QA testing, or penetration testing
• Familiarity with AI technologies, LLM security, or prompt engineering
• Experience building security automation scripts

Benefits

• Medical, dental, vision, and life insurance
• 401(k) Plan with company match
• $2,000 one-time home office equipment payment
• Four weeks of PTO in the first year
• Twelve weeks of fully paid parental leave
• $5,000 annual professional development allowance
• LinkedIn Learning and BetterUp coaching access

About the Company

Quanata is an insurance technology innovation company that engineers advanced risk prediction and prevention solutions. Wholly owned and funded by State Farm, Quanata builds AI-native insurance platforms to help clients adapt to evolving market needs.