Skip to content

Security specialty

Application & Product Security jobs

$184k–$346k/yrtypical paylive median $220k/yr hiring for it

Computed from 95 different pay ranges employers posted, by 63 employers, each counted as a year's pay (an hourly rate times 2,080 hours). 77 of the 181 open roles in this set give no salary.

Live AppSec roles

Read 12 Nov 2026, 12:07 UTC

A few links on CyberJobs.cc are referral links: when one leads to a hire, a sign-up or a purchase (a lab, a course or a tool marked Partner), the company behind it may pay CyberJobs.cc a fee. You pay nothing extra, and it never changes the salary an employer offers you or which roles the board lists.

Keep vulnerabilities out of the software a company ships: threat modeling new features, secure code review, running static and dynamic scanners and fixing their noise, software supply chain controls, bug bounty triage and teaching developers to write safer code. Titles include application security engineer, product security engineer and DevSecOps engineer.

AppSec alerts

Hear first about new AppSec roles

One weekly email with the newest AppSec roles at every employer we follow and the salary each states, so you can stop checking by hand. Free; leave whenever you like.

Only job openings, never promotions. Unsubscribing takes one click.

In short

Application & Product Security. Keep vulnerabilities out of the software a company ships: threat modeling new features, secure code review, running static and dynamic scanners and fixing their noise, software supply chain controls, bug bounty triage and teaching developers to write safer code. Its postings usually state $184k–$346k/yr, and the middle salary today is $220k/yr (the application security engineer salary by level and employer). have posted it, for example Anthropic, OpenAI, Roblox.

Who recruits for AppSec

EmployerOpeningsSalary in this specialty
Anthropic logoAnthropic2Stated per posting
OpenAI logoOpenAI1Stated per posting
Roblox logoRoblox3$270k–$373k/yr
Decagon logoDecagon1Stated per posting
Harvey logoHarvey2Stated per posting
Affirm logoAffirm1Stated per posting
Zipline logoZipline1Stated per posting
Scale AI logoScale AI1Stated per posting
Vercel logoVercel1Stated per posting
Verkada logoVerkada1Stated per posting
Docker logoDocker1No salary in its postings
Reddit logoReddit1Stated per posting
Ripple logoRipple2Stated per posting
Brex logoBrex1Stated per posting
Apollo.io logoApollo.io2Stated per posting
Cohere logoCohere1Stated per posting
Figure AI logoFigure AI1Stated per posting
Snowflake logoSnowflake2Stated per posting
Veeam logoVeeam3Stated per posting
Zeta Global logoZeta Global1Stated per posting
Higgsfield AI logoHiggsfield AI2Stated per posting
Beast Industries logoBeast Industries1Stated per posting
Rain logoRain1Stated per posting
Liftoff logoLiftoff1Stated per posting
Notion logoNotion1No salary in its postings
WorkOS logoWorkOS1Stated per posting
Glean logoGlean2Stated per posting
Okta logoOkta3Stated per posting
Acronis logoAcronis1No salary in its postings
Plaid logoPlaid2Stated per posting
Instructure logoInstructure1Stated per posting
PlayStation (Sony Interactive Entertainment) logoPlayStation (Sony Interactive Entertainment)2Stated per posting
Obsidian Security logoObsidian Security1Stated per posting
Starburst logoStarburst1Stated per posting
Airwallex logoAirwallex3Stated per posting
Anduril Industries logoAnduril Industries5$175k–$234k/yr
Snyk logoSnyk1Stated per posting
GitLab logoGitLab0Stated per posting
Palo Alto Networks logoPalo Alto Networks2No salary in its postings
Superhuman logoSuperhuman1Stated per posting
AlphaSense logoAlphaSense3Stated per posting
Peregrine logoPeregrine1Stated per posting
Coinbase logoCoinbase1Stated per posting
Intercom logoIntercom1Stated per posting
Writer logoWriter2Stated per posting
Rubrik logoRubrik1Stated per posting
Abnormal Security logoAbnormal Security1Stated per posting
Agoda logoAgoda1No salary in its postings
Aidoc logoAidoc1No salary in its postings
AppsFlyer logoAppsFlyer1No salary in its postings
Asana logoAsana2Stated per posting
Axonius logoAxonius1No salary in its postings
BeyondTrust logoBeyondTrust2No salary in its postings
BJAK logoBJAK2No salary in its postings
Bloomreach logoBloomreach1No salary in its postings
Bybit logoBybit1No salary in its postings
Checkout.com logoCheckout.com1No salary in its postings
ClickHouse logoClickHouse1Stated per posting
commercetools logocommercetools1No salary in its postings
Commvault logoCommvault1No salary in its postings
Crusoe logoCrusoe1No salary in its postings
Dashlane logoDashlane1No salary in its postings
Druva logoDruva1No salary in its postings
Emergent logoEmergent1No salary in its postings
Endor Labs logoEndor Labs2No salary in its postings
ESET logoESET1No salary in its postings
Geotab logoGeotab0No salary in its postings
IonQ logoIonQ1No salary in its postings
Keenfinity logoKeenfinity1No salary in its postings
Lovable logoLovable1No salary in its postings
Mistral AI logoMistral AI1No salary in its postings
Nebius logoNebius1Stated per posting
Payoneer logoPayoneer2No salary in its postings
Reflection AI logoReflection AI1No salary in its postings
Riskified logoRiskified1No salary in its postings
Shield AI logoShield AI3No salary in its postings
Solidgate logoSolidgate1No salary in its postings
Tekion logoTekion1No salary in its postings
Thales logoThales2No salary in its postings
Tide logoTide1No salary in its postings
Turing logoTuring1No salary in its postings
Applied Intuition logoApplied Intuition2Stated per posting
Samsara logoSamsara2Stated per posting
Cloudflare logoCloudflare3Stated per posting
Metropolis logoMetropolis1No salary in its postings
Flexport logoFlexport4$179k–$271k/yr
GuidePoint Security logoGuidePoint Security4No salary in its postings
Delinea logoDelinea2Stated per posting
Qualys logoQualys2Stated per posting
MongoDB logoMongoDB1Stated per posting
Recorded Future logoRecorded Future1Stated per posting
Trace3 logoTrace32Stated per posting
Reltio logoReltio1Stated per posting
Gong logoGong0Stated per posting
Sentry logoSentry2Stated per posting
Illumio logoIllumio1Stated per posting
Bugcrowd logoBugcrowd3Stated per posting
CLEAR logoCLEAR1Stated per posting
Chainguard logoChainguard5$194k–$253k/yr
Gen Digital logoGen Digital1Stated per posting
Digital Asset logoDigital Asset1Stated per posting
TRM Labs logoTRM Labs1Stated per posting
CrowdStrike logoCrowdStrike1Stated per posting
Smartsheet logoSmartsheet0Stated per posting
Forward Financing logoForward Financing1Stated per posting
Cribl logoCribl1Stated per posting
SpaceX logoSpaceX12$218k–$347k/yr
iCapital logoiCapital3Stated per posting
xAI logoxAI2Stated per posting
The New York Times logoThe New York Times1Stated per posting
AEG logoAEG2Stated per posting
Esri logoEsri2Stated per posting
micro1 logomicro11Stated per posting

Listed by the expected value of applying, with a small lift for employers that pay us a referral fee; that lift never touches a salary figure.

Live from employers' boardsFrom its own postingsThird-party reportsEstimate· salary notes checked 11 Nov 2026 to 11 Nov 2026

What each salary label means

The salary explorer sets AppSec against every other specialty and estimates a figure for your seniority.

Let security teams come to you

Security teams sometimes ask us directly for someone with a given specialty, clearance or certification. Join the candidate pool once and we put you forward when a brief matches, and only after you say yes. No cost to you.

Create my profile

From the forum

Nobody has posted about AppSec yet. Open the thread you wish existed.

Start a thread on AppSec