Security Engineer - Application Security (Senior)
At its midpoint, $200k/yr, this role pays less than the $212k/yr midpoint for Application & Product Security openings today (usual band $175k–$346k/yr).
The full posting
About Cogent
Cogent is an Applied AI Lab building the next generation of AI agents for cybersecurity. AI has fundamentally changed how attacks happen, allowing malicious actors to operate at unprecedented speed and scale. Cogent’s "AI Taskforce" assesses petabytes of enterprise data to remediate these issues before critical breaches occur.
To stay at the cutting edge, we blend frontier research with real-world execution. Alongside our core product work, Cogent Research serves as our applied AI lab, providing the research horsepower needed to make truly agentic security workflows a reality.
Since coming out of stealth, Cogent has experienced rapid growth. We partner with Fortune 500 companies to secure some of the most complex production environments in the world.
We’re backed by Greylock and we’ve built a team with the best minds in applied AI. Our team is comprised of people from:
- Top universities like Stanford, Berkeley, Penn, Duke, Carnegie Mellon, Waterloo
- Preeminent research labs like Deepmind and SAIL
- Unicorn, high-growth companies like Scale AI, Databricks, Stripe, Tesla, Coinbase
- World class cybersecurity experts from Wiz, Abnormal AI, Zscaler
About The Role
We're hiring a Senior Application Security Engineer to own the security of the software we build. You'll partner closely with engineering to embed security into the Software Development Lifecycle (SDLC), keep our dependencies and supply chain safe, and make sure the product our customers trust is built on a secure foundation. You’ll also have the chance to influence our product, as an internal SME and early security user, your feedback loop directly shapes what we ship.
What You’ll Do
- Embed security into the software development lifecycle: threat modeling, secure design reviews, and secure-coding guidance that engineers actually adopt
- Own application security testing - code review, SAST/DAST, and triage - and drive issues to remediation rather than just filing them
- Harden our software supply chain: dependency verification, safe dependency management, and CI/CD pipeline security
- Build and automate security tooling and guardrails so security scales with engineering, not against it
- Serve as the internal security SME on product and workflow decisions, and as an early user of what we build
- Partner across all teams on architecture and design so security is a default, not an afterthought
What We're Looking For
- 5+ years of extensive security engineering experience within product / application security, upholding the highest Trust standards
- Strong hands-on engineer who ships - you produce and automate, you don't just manage process
- Strong software engineering skills; comfortable working in code across the stack (e.g. Python, Go, Typescript, and/or similar)
- Depth in application/product security: secure SDLC, threat modeling, code scanning, and supply-chain / dependency security
- Fluency with the modern AI landscape and how it’s influencing the security picture - staying up to date with the rapidly changing environment
- Able to flex up and down: strategic when it matters, in the weeds when it counts
- Comfortable being an early security hire at a startup - high ownership, ambiguity, and direct impact
Bonus Points
- Experience securing AI/ML products or agentic systems
- Background contributing to developer-enablement or security-champions programs
- Prior experience as an early security hire or building an AppSec function from scratch
For California Based Applicants
The standard base salary range for this position is $100,000 - $300,000 annually. Compensation offered will be determined by factors such as location, job level, job-related knowledge, skills, and experience. Certain roles may be eligible for variable compensation, equity, and benefits.
We are committed to building an inclusive and diverse company. We do not discriminate based on gender, ethnicity, sexual orientation, religion, civil or family status, age, disability, or race.
Where you can be based
This position is 100% remote and open to applicants based in United States.
Text as Cogent Security published it; last compared with the original on 12 Nov 2026.
The application
Your details, CV and LinkedIn, then 5 questions (3 written).
- 1.Do you currently, or will you in the future, need visa sponsorship to work in the United States (e.g. H-1B)?Yes or no
- 2.Why Cogent?Written answer
- 3.While Cogent doesn't have set working hours, as a Series A startup in an increasingly competitive field, nights and weekend hours are not uncommon. Are you ready for or excited to work in this type of environment?Short answer
- 4.Tell us about a project that you're especially proud of.Written answer · optional
- 5.Anything else you want to share?Written answer · optional
Taken from Cogent Security's application form as it stood on 12 Nov 2026.
The employer: Cogent Security
Builds AI agents that triage and coordinate vulnerability fixes for enterprises; it wants a senior application security engineer and an AI security researcher, remote US.
Pay and benefits: Salaried roles at an early-stage, venture-funded company, remote within the US.
Other security roles worth a look
A few links on CyberJobs.cc are referral links: when one leads to a hire, a sign-up or a purchase (a lab, a course or a tool marked Partner), the company behind it may pay CyberJobs.cc a fee. You pay nothing extra, and it never changes the salary an employer offers you or which roles the board lists. Roles from partners who pay us a fee rank a little higher in this list.
Backend Security Engineer (shows the role here)
micro1 · Security Engineering · Remote· 1mo agoDetails
$30–$100/hr
Application Security Engineer – CVE & Vulnerability Research (shows the role here)
Anyone AI · Offensive Security · Remote· 1mo agoDetails
$65/hr
Director Backend Engineering (Security Infrastructure) (shows the role here)
Coupang · Leadership · Singapore; Singapore, Singapore· 4mo agoDetails
Let security teams come to you
Security teams sometimes ask us directly for someone with a given specialty, clearance or certification. Join the candidate pool once and we put you forward when a brief matches, and only after you say yes. No cost to you.
Hear first when Cogent Security posts a security role
We read Cogent Security's careers system around the clock and send its new security roles in a weekly email, along with comparable openings at other employers. Free; leave whenever you like.