Impress employers and recruiters.
Choose from hundreds of resume examples.
Impress employers and recruiters.
Choose from hundreds of resume examples.
Tailor your resume to this Application Security Engineer role.
Rezi rewrites your resume against Opendoor's job description. Free.
Tailor your resume to this Application Security Engineer role.
Rezi rewrites your resume against Opendoor's job description. Free.
Don't guess if your resume is good enough.
See how it scores against the Application Security Engineer posting at Opendoor — free, in seconds.
Don't guess if your resume is good enough.
See how it scores against the Application Security Engineer posting at Opendoor — free, in seconds.
About the Role
Our Security Engineering team builds intelligent systems that protect Opendoor and our customers while enabling unprecedented engineering velocity. We apply software engineering and AI to solve security problems across product, infrastructure, and operations by building guardrails where they matter, not gates where they don't. As our Application Security Engineer, you'll own how we find, prioritize, and drive down application-layer risk across the consumer flows that put cash offers in homeowners’ hands, the GraphQL APIs that power our products, and the AI agents and vibe-coded tools our engineers ship every week. The job is to make it safe to build fast, not to slow things down.
Responsibilities
- Define, build and operate Opendoor’s application vulnerability identification capability, including tooling, triage workflow, and remediation techniques across consumer products, internal admin tools, and GraphQL API.
- Assess, rationalize, and own the AppSec tooling stack, integrating findings into developer workflows.
- Own and mature the HackerOne program, including tightening the triage workflow and improving signal to noise on incoming reports.
- Lead threat modeling and security design reviews for new services, APIs, and mobile features.
- Build AI agents and automated workflows to triage vulnerability reports, validate exploit reproductions, and draft remediation pull requests.
- Partner with engineering teams to harden authentication, authorization, and input validation across the codebase and production services.
- Build Opendoor’s offensive security capability, including scoping and running internal security testing and red team exercises.
- Set the bar for secure by default for AI-maximalist engineering.
- Build Opendoor’s security culture by establishing secure design standards and embedding into engineering team rituals.
Requirements
- Deep conviction that AI and automation should eliminate manual work and increase team impact, with a track record of building agentic systems.
- Comfort operating with high autonomy in ambiguous environments.
- Business enablement security mindset, measuring success by business impact and informed risk-taking.
- Application security or software engineering experience with a security focus.
- Strong skills in at least one of Python, Go, TypeScript, or Ruby, and the ability to read and write code across the others.
- Hands-on expertise across the security risk detection toolchain with real deployment experience using GitHub Advanced Security, Semgrep, or equivalent.
- Strong grasp of common application and API vulnerability classes including GraphQL, REST, and gRPC security pitfalls.
- Practical threat modeling skills.
- Experience with cloud and container security on AWS and Kubernetes.
- Humility and genuine curiosity.
Skills
- Go
- Python
- TypeScript
- Ruby
- Terraform
- AWS
- GCP
- Azure
- Kubernetes
- Apollo GraphQL
- GitHub Advanced Security
- CodeQL
- Dependabot
- Semgrep
- HackerOne
- Burp Suite
- Cloudflare WAF
- Claude
- OpenAI
- Agent frameworks
- MCP
- Pentesting
- API security
- Mobile security
- Bug bounty programs
- Coordinated disclosure programs
- iOS security
- Android security
- AI security
- Machine learning pipelines
- OSCP
- OSWE
Location
- Talent hubs
Work Type
- In-office
- 5 days a week
- Mo, Tu, Th, Fri
Experience Level
- Application security or software engineering experience with a security focus
- Hands-on expertise across the security risk detection toolchain
- Experience with cloud and container security on AWS and Kubernetes
- Offensive security experience including pentesting, API security, or mobile security
- Experience running a bug bounty or coordinated disclosure program at scale
- Mobile application security review experience (iOS and Android)
- Experience securing AI and machine learning pipelines, agent frameworks, or MCP-style integrations
Education Level
- OSCP, OSWE, or similar offensive certifications
About the Company
- Our Security Engineering team builds intelligent systems that protect Opendoor and our customers while enabling unprecedented engineering velocity.
- We apply software engineering and AI to solve security problems across product, infrastructure, and operations by building guardrails where they matter, not gates where they don't.