Staff Application Security Engineer - Remote

Overview

As a Staff Application Security Engineer at Webflow, you will help elevate the company's secure development practices, focusing on secure coding, tooling, and improving procedures.

In Short

• Remote-first position based in the US or Canada.
• Full-time and permanent role.
• Collaborate with the engineering team to secure Webflow’s platform.
• Implement security best practices in the software development lifecycle.
• Identify and mitigate security vulnerabilities.
• Contribute to security tooling initiatives and compliance frameworks.
• Mentor junior application security engineers.
• Participate in a company-wide bonus program.
• Equity ownership as part of the benefits package.
• Flexible PTO and mental wellness support.

Requirements

• 7+ years of experience in application security.
• 2+ years of software development focused on security.
• Expertise in secure software design and web application security.
• Experience with Threat Modeling and penetration testing.
• Knowledge of secure development lifecycle processes.
• Experience mentoring other engineers.
• Ability to communicate complex security concepts effectively.

Benefits

• 100% employer-paid healthcare, vision, and dental insurance.
• 12 weeks of paid parental leave.
• Flexible PTO and sabbatical program.
• Access to mental wellness resources.
• 401k plan or pension schemes.