Skip to main content
CareerApp

Application Security Engineer

MyFitnessPal

Remote - US · Remote · full time · Mid

$90,000 – $120,000

Listed on MyFitnessPal’s own careers site. You apply with them directly — we never stand between you and the employer.

What this role is

This role secures MyFitnessPal's applications and development processes by triaging vulnerabilities from automated tools, managing a bug bounty program, and building security automation. It suits mid-level security engineers who combine hands-on technical work with cross-team collaboration and want to grow through real ownership of a program that protects millions of users.

Our summary, not MyFitnessPal’s wording. The full posting is on their site.

Skills this role names

Log in to see which of these are already on your profile.

What they ask for

Required

  • 2–4 years in security engineering, application security, or software engineering
  • Understanding of application security assessment techniques (SAST, DAST, SCA, penetration testing)
  • Knowledge of secure development practices for web and mobile applications
  • Experience triaging vulnerabilities and communicating findings to engineers
  • Familiarity with cloud microservices, containerization, and Kubernetes
  • Strong cross-functional communication skills
  • Ability to learn new products and technologies quickly

Nice to have

  • Experience automating security processes with Python or SOAR platforms
  • Experience with security scanning in CI/CD pipelines
  • Experience operating or triaging a bug bounty program
  • Experience with AI/agentic-assisted tooling like Claude Code
  • BS in Computer Science or related field
  • Security certifications (GIAC, OSCP, CSSLP, Security+)

Turn on analytics and we load Google Analytics: Google gets the pages you open and what you do here — searches, jobs you view, jobs you apply to — and sets its own cookies. Leave it off and the only cookies we set are your login, your theme, and this answer. Accept All also records a yes to advertising, which nothing uses yet. Privacy Policy.