Impress employers and recruiters.
Choose from hundreds of resume examples.

Target Resume Now

About the Role

Savvy Wealth is seeking a Senior Application Security Engineer for its NYC headquarters. This is a hands-on engineering role focused on executing the security strategy, identifying and remediating vulnerabilities, and closing security gaps in both the product and SaaS tools. The role emphasizes making secure development practices easy and safe, particularly in an AI-assisted development environment, without focusing on compliance or GRC.

Responsibilities

Own vulnerability management end to end: identify, triage, prioritize, and drive remediation across product, codebases, and cloud infrastructure (AWS, GCP, Cloudflare).
Build and operate the AppSec tooling pipeline, including secrets scanning, SCA/dependency scanning, and SAST.
Set and enforce security hygiene standards in codebases, including code review standards for AI-generated code.
Partner with the internal AI team to design guardrails for AI-assisted development, including sanctioned tooling, data handling, dependency vetting, and secure defaults for AI-built integrations.
Secure the SaaS stack by hardening configurations, reviewing OAuth grants and third-party integrations, and reducing misconfiguration risk.
Help establish conditional access and identity-layer controls in partnership with IT.
Define cloud and SaaS configuration baselines for the infrastructure footprint.
Contribute to detection and response readiness by creating high-signal detections and participating in incident response.
Work cross-functionally with Engineering, IT, and the internal AI team, articulating risk and tradeoffs to various stakeholders.

Requirements

5+ years of hands-on security engineering experience, with significant time in application security or product security.
Strong software engineering fundamentals; comfortable reading, writing, and remediating code.
Deep experience with the modern AppSec toolchain: secrets scanning, SCA/dependency scanning, SAST, and CI/CD security integration (GitHub-centric).
Practical experience securing SaaS environments: OAuth and third-party app review, configuration hardening, and least-privilege access design.
Working knowledge of cloud security across AWS and/or GCP, and edge/CDN security (Cloudflare).
A pragmatic, risk-based mindset: prioritize by what actually gets exploited, ship iteratively, and avoid noise.
Strong perspective on AI-assisted development security: understand AI coding tool risks and how to build guardrails without killing velocity.
Track record of partnering with engineering teams as an enabler, embedding security into existing workflows.
Excellent communication skills and ability to work independently in a fast-paced environment.
Strong writing skills; Savvy is a written culture.

Skills

Application Security
Product Security
Software Engineering
Secrets Scanning
SCA/Dependency Scanning
SAST
CI/CD Security
SaaS Security
OAuth
Third-party App Review
Configuration Hardening
Least-Privilege Access
AWS Security
GCP Security
Cloudflare Security
Risk-based Mindset
AI-assisted Development Security
Communication Skills
Writing Skills

Location

NYC headquarters

Work Type

Onsite

Experience Level

Senior

Benefits

Competitive salary and equity package
Unlimited PTO + paid company holidays
Holistic medical, dental, and vision plans
Company 401(k), Commuter, and HSA/FSA plans
NYC office in the heart of Manhattan
Lunch and snacks provided in the office
Access to virtual mental health care (Spring Health)
Vision related benefits (XP Health)
Health concierge (Rightway)
Access to counseling for stress management, dependent care, nutrition, fitness, legal, and financial issues (Guardian WorkLifeMatters EAP)

About the Company

Savvy Wealth is reinventing wealth management, an industry that still relies heavily on manual processes.
The company partners with experienced financial advisors, offering them a modern, AI-native platform and a business-in-a-box solution.
Advisors benefit from a proprietary tech platform, client portal, in-house marketing, investment management, and client services.
AI is integral to Savvy's operations, with AI-native products and widespread use of AI tools like Claude.
Savvy Wealth is a Series B company with approximately 150 employees, experiencing over 500% year-over-year growth, backed by $105M in funding.
The company is recognized as a Certified Great Place to Work, with honors including Newsweek's America's Greatest Startup Workplaces and Fortune Best Workplaces in New York™.