Add job to your application bundle

Job added to your application bundle

Apply Now

Apply Now

    Original Submissions:

    Removing these jobs from your application bundle will withdraw your application from consideration towards this position.

      New Submissions:

        By visiting our website, you agree to our Online Privacy Statement and our Terms of Use, which include a class action waiver and an arbitration provision. Clicking “Accept All” means you consent to our use of cookies and similar tracking technologies, such as analytics cookies provided by third-party companies, which help us understand how our website is used. Clicking “Decline All” means you prevent us from using non-essential cookies or other similar tracking technologies on our website; however, we will continue to use essential cookies for the core functions of our website, including security.

        Application Security Engineer

        Technology
        New York

        The D. E. Shaw group seeks application security engineers to join its Information Security team within the Systems group. This team is dedicated to advancing the firm's security posture across a fast-paced, large-scale IT environment, supporting investment activity and technology development. As AI transforms traditional security review, this hands-on individual-contributor role combines partnering with developers on secure design and building the automated, AI-enabled tools that shape how application security is done at the firm.

        What you’ll do day-to-day

        • Design, build, and operate agentic security workflows that continuously review code changes, using existing analyzers and custom analysis to investigate findings and propose fixes.
        • Build evaluations, feedback loops, and guardrails that assess false positives, missed vulnerabilities, and the safety of proposed fixes, using known test cases and expert review.
        • Lead security and design reviews for new and existing software, working directly with developers to identify vulnerabilities and recommend practical remediation.
        • Help secure the firm's own use of agentic AI, assessing how developer agents and internal AI platforms handle identity, data access, and tool execution.
        • Partner with development teams to embed secure coding practices and strengthen the Secure Development Lifecycle (SDLC).
        • Represent Information Security to engineering teams, turning findings into clear, actionable guidance for technical and, occasionally, non-technical stakeholders.

        What we’re looking for

        • At least five years of experience in application security, product security, security engineering, or software engineering with a solid security focus.
        • A bachelor's degree or higher in computer science or a related technical discipline; advanced degrees in relevant specialties, such as cryptography, are welcome.
        • Advanced knowledge of web application security fundamentals, including web protocols, authentication and identity standards (e.g., OIDC), browser security behavior, and applied encryption basics.
        • Fluency using AI in day-to-day engineering work; experience building applications or agents with AI SDKs, or an understanding of security risks in agentic applications.
        • A track record of building security software, such as product features, internal tools, custom scanners, or analysis capabilities, rather than only deploying or operating off-the-shelf tools.
        • Hands-on experience finding and mitigating vulnerabilities in complex systems through secure design review, code review, or penetration testing.
        • Familiarity with modern software development practices and workflows.
        • Sound judgment and clear communication, with the ability to work effectively with developers and make security decisions independently.
        • The expected annual base salary for this position is $225,000 to $300,000. Our compensation and benefits package includes variable compensation in the form of a year-end bonus, guaranteed in the first year of hire, and benefits including medical and prescription drug coverage, 401(k) contribution matching, wellness reimbursement, family building benefits, and a charitable gift match program.

        The D. E. Shaw group is an equal opportunity employer.

        The applicable annual base salary or hourly rate paid to a successful applicant will be determined based on multiple factors, including without limitation the nature and extent of prior experience and educational background.

        European Union (EU), United Kingdom (UK), California, Hong Kong, Singapore, or Shanghai candidates should refer to the corresponding linked privacy notice.

        The D. E. Shaw group may collect, use, hold, transfer, and process candidates’ resumes and associated information (including personal information contained therein) for purposes reasonably related to their application, including without limitation: review and management of employment applications and supporting materials; administration and management of offers to and communication with candidates; and administration, management, and improvement of the recruiting operations of the D. E. Shaw group; and/or where reasonably required in connection with a proposed sale, spin-out, reorganization, or outsourcing of all or some of the business of the D. E. Shaw group. The D. E. Shaw group will not use such information for purposes unrelated to the foregoing, such as direct marketing of third-party products to candidates, without candidate consent. As used herein, the term “personal information” is meant to broadly describe information identifying or relating to a specific individual; it is intended to encompass “personal data,” “sensitive personal data,” and “personally identifiable information” and similar terms, as those terms are defined by law in the jurisdictions in which the D. E. Shaw group operates.

        The D. E. Shaw group may transfer such personal information within and outside the country and jurisdiction of the locations where the D. E. Shaw group maintains offices, to other D. E. Shaw group affiliates, to government and regulatory authorities, and to third parties which provide or may provide support and/or services to the D. E. Shaw group and for the purposes set forth above. The persons who may have access to this personal information are other employees of the D. E. Shaw group, in connection with the performance of their duties of employment, and the other parties listed above, in connection with the business of the D. E. Shaw group. (Of course, candidates will be considered for employment opportunities only in those countries in which they express interest.)

        The D. E. Shaw group will use reasonable care to maintain the confidentiality of personal information (including appropriate technical measures against unauthorized or unlawful processing and against accidental loss or destruction of, or damage to, such information) and will retain such data as required by applicable law or regulation. Candidates have the right to request access to, and correction of, their personal information in accordance with applicable law; any such request should be submitted to recruiting-inquiries@deshaw.com. Candidates who have submitted a resume to the D. E. Shaw group and do not wish to proceed with their applications should email cvwithdraw@deshaw.com. Personal information of candidates who have been the subject of background checks may have been transferred in accordance with applicable regulations, and any concerns with such transfers should be submitted to backgroundcheck-inquiries@deshaw.com.

        The D. E. Shaw group may retain candidates’ information for prospective recruiting activities, including sourcing candidates for employment opportunities and for organizing events with prospective candidates, in accordance with our internal data retention procedures. Candidates who do not agree to such future use should email recruiting-inquiries@deshaw.com.