Impress employers and recruiters.
Choose from hundreds of resume examples.

Target Resume Now

About the Role

As Tatari's first dedicated Application Security Engineer, you will define the security architecture for all shipped products. You will collaborate directly with Engineering teams to identify vulnerabilities, design mitigations, and build tooling and automation to facilitate secure development practices. This role reports to the Head of Security and is a key technical contributor to Tatari's Security program.

Responsibilities

Design and execute greenfield AppSec initiatives across Tatari's SaaS platform from threat modeling to remediation
Build and maintain security automation integrated into CI/CD pipelines and manage software supply chain risk
Own container security across build and runtime
Develop internal tooling and libraries that make secure coding easier for application engineers
Own SAST/DAST/SCA tooling: selection, tuning, CI/CD integration, and triage
Conduct application security reviews and threat models for new features and architectural changes
Identify and remediate vulnerabilities across APIs, services, and data pipelines
Partner with Engineering teams to establish secure coding standards and provide hands-on guidance
Assess and mitigate LLM-introduced risks in product features
Integrate agentic tooling into AppSec workflows to reduce toil
Contribute to security incident response when application-layer issues are involved

Requirements

Production Python experience with the engineering depth to review code meaningfully and build security tooling
Significant hands-on application security experience, ideally at a SaaS company
Working knowledge of established standards (OWASP Top 10, API Security Top 10, ASVS, SPVS, AISVS) and how common vulnerability classes manifest in production systems
Threat modeling experience with Product and Engineering teams
Experience building security tooling or automation (scripts, pipelines, libraries)
Familiarity with AWS and Kubernetes security controls as they relate to application-layer risks
Working knowledge of how LLMs introduce new attack surfaces and how to mitigate them
Practical experience using AI tools in security or engineering workflows
Demonstrated experience reviewing API designs and implementations for auth anti-patterns, token mismanagement, injection risks, and sensitive data exposure
Track record embedding with Engineering teams: code review, design consultation, and standards definition
Experience building or maturing an AppSec program where coverage, tooling, or process needed to be defined from scratch

Skills

Python
Java
Rust
Application Security
SaaS
OWASP Top 10
API Security Top 10
ASVS
SPVS
AISVS
Threat Modeling
Security Tooling
Automation
CI/CD
AWS
Kubernetes
LLM Security
AI Tools
API Design
Authentication
Token Management
Injection Risks
Sensitive Data Exposure
Secure Coding Standards

Location

New York, NY

Work Type

Hybrid

Experience Level

Senior

Salary/Compensations

$165,000-$190,000

Benefits

Equity compensation
Health insurance coverage for you and your dependents
401K
FSA
Commuter benefits
$150 monthly spending account
$1,000 annual continued education benefit
$500 Newbie Productivity Perk
Unlimited PTO and sick days
Monthly Company Wellness Day Off
Snacks, drinks, and catered lunches at the office
Team building events

About the Company

Tatari is a late-stage AdTech company founded in 2016 to revolutionize TV advertising through AI and machine learning.
The platform combines sophisticated media buying with proprietary analytics to create an automated, digital-like experience for TV advertising.
Tatari has received industry recognition, including Best CTV AdTech Platform and Best Place to Work.
The company is backed by an executive team with experience from major tech companies.
Tatari has recently attained SOC2 Type II attestation and is focused on maturing its security and privacy posture.

Equal Opportunity

At Tatari, we believe in the importance of cultivating teams with diverse backgrounds and offering equal opportunities to all.
We strive to create a welcoming, inclusive environment where every team member feels valued and diversity is celebrated.