Application Security Engineer at Quanata

At Quanata, we are dedicated to building a better world through context-based insurance solutions. As an innovation-focused company backed by State Farm, we combine the agility of Silicon Valley talent with the stability of a leading insurer to engineer advanced risk prediction and prevention technologies. We are currently seeking a Senior Application Security Engineer to join our remote-first team and help us build secure-by-default products for our AI-native insurance platform.

Key outcomes

• Collaborate with our Product and Engineering teams to weave security directly into the design and development phases.
• Lead threat modeling initiatives to identify and mitigate risks within our complex systems.
• Perform secure code reviews, vulnerability analysis, and comprehensive application security assessments.
• Design and deploy automated security guardrails that support a fast-paced software development lifecycle.
• Prioritize and drive the remediation of security findings to ensure our applications remain resilient and compliant.
• Mentor engineering teams on secure coding practices and foster a culture of security awareness.
• Establish and maintain security standards and procedures that scale effectively across the organization.
• Partner with our Privacy and Business Assurance teams to meet critical risk management and compliance objectives.

Requirements

• At least 4 to 6 years of experience in software engineering, with a minimum of 2 years specifically dedicated to application security.
• A strong understanding of secure-by-design principles and modern application security frameworks, including the OWASP Top 10, ASVS, and MASVS.
• Proven experience in threat modeling methodologies such as STRIDE or PASTA.
• Proficiency in at least one programming language and its associated security ecosystem.
• A solid working knowledge of cloud platforms and modern application architectures.
• Excellent communication skills with the ability to influence both technical and non-technical stakeholders.
• An associate degree or equivalent practical experience.
• The ability to thrive in a fast-paced environment where priorities can shift quickly.

Preferred qualifications

• Relevant security certifications such as CSSLP, GWEB, or OSWE.
• Prior experience working within regulated industries like insurance, healthcare, or financial services.
• Advanced expertise in cloud security architecture or mobile application security.
• Familiarity with AI technologies, including LLM security and prompt engineering.
• Experience building custom scripts or automation tools to streamline security workflows.
• Active participation in the security community through publications, presentations, or open-source contributions.

Compensation

The salary range for this position is $175,000 to $215,000. Final offers are determined based on individual skills, experience, and our internal equity structure. We offer a comprehensive benefits package, including medical, dental, vision, and life insurance, as well as a 401(k) plan with a company match. Employees also receive a monthly wellness allowance, a subscription to Headspace, and a one-time $2,000 payment for home office equipment. We support your growth with up to $5,000 annually for professional development, LinkedIn Learning access, and BetterUp coaching. Additionally, we provide four weeks of paid time off and twelve weeks of fully paid parental leave.

How to apply

If you are passionate about building secure, AI-native insurance products, we invite you to apply to join our team. Please ensure you only interact with our official team members via the quanata.com domain to protect your personal information during the recruitment process. We look forward to reviewing your application.