Senior Application Security Engineer
Airbnb · United States
About this role
**Senior Application Security Engineer — Airbnb (US Remote Eligible)** ## About Airbnb Airbnb was born in 2007 and has grown to millions of hosts welcoming billions of guest arrivals across nearly every country. ## The Community You Will Join Airbnb’s Application Security (Appsec) team helps make the platform safer for millions of users worldwide. The team covers responsibilities ranging from tool development to architectural consulting—partnering closely with product teams to integrate security throughout development with minimal friction. ## The Difference You Will Make As a Senior Application Security Engineer, you will own the security partnership with one or more product engineering areas, lead high-impact security initiatives from problem definition through measurable risk reduction, and serve as a subject matter expert for the hardest application security problems. ## A Typical Day - Lead the identification and elimination of entire classes of application security vulnerabilities by designing and delivering scalable solutions (paved roads, guardrails, and tooling). - Own the security partnership with one or more product engineering areas: run threat models, design reviews, and code reviews for complex/high-risk systems; set security requirements early and drive them through launch. - Lead security initiatives spanning multiple teams, influencing engineering leaders and partner teams without direct authority. - Serve as an Appsec escalation point; mentor and coach other security engineers and help onboard new team members. - Educate and empower software engineers to strengthen security expertise and build a culture of security awareness. - Investigate, prioritize, and drive remediation of application security vulnerabilities, including the most complex/highest-risk findings. ## Your Expertise - Deep understanding of web and mobile application security (common vulnerabilities, attack vectors, and secure development practices), with depth to be a go-to expert in at least one area (e.g., authentication/authorization, API security, or mobile security). - Hands-on software development experience (ideally Java, JavaScript, Python, Swift) and a track record of shipping security tooling or paved-road solutions adopted by other engineers. - Knowledge of modern frameworks (e.g., ReactJS, Dropwizard, GraphQL) and ability to assess security implications and define secure-by-default patterns. - Proven experience leading security initiatives across multiple teams—defining problems, aligning stakeholders, and delivering measurable risk reduction. - Strong communication and leadership skills, including educating/empowering engineers and mentoring security peers. - 5+ years of experience in application security (or similar), with a strong focus on threat modeling, architecture reviews, and scalable vulnerability mitigation. ## Your Location This position is **US - Remote Eligible**. The role may include occasional work at an Airbnb office or attendance at offsites as agreed with your manager. While remote eligible, you must live in a state where Airbnb, Inc. has a registered entity (excluded states apply). ## Inclusion & Belonging Airbnb encourages qualified individuals to apply and is committed to an inclusive application and interview process. If you need reasonable accommodation to submit an application, contact **reasonableaccommodations@airbnb.com**. ## Pay Range **$196,000 – $227,000 USD** (base pay range; subject to change and depen
Listing freshness
CronJobs last confirmed this listing 1h ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.