Tatari
Senior Application Security Engineer
San Francisco, California, United States · Senior
Sponsorship not specified$165k-$190kDetected 13 days ago
PythonJavaRustCode ReviewAWSKubernetesCI/CDMachine LearningData EngineeringLLMsCybersecurityIncident ResponseComplianceSupply Chain
About the role
- As our first dedicated Application Security Engineer, you will define the security architecture for everything we ship.
- You will report to the Head of Security as a key technical contributor to Tatari's Security program.
- And you know how to bring engineers along with you.
Responsibilities
- Design and execute greenfield AppSec initiatives across Tatari's SaaS platform from threat modeling to remediation
- Build and maintain security automation integrated into CI/CD pipelines and manage software supply chain risk
- Own container security across build and runtime
- Develop internal tooling and libraries that make secure coding easier for application engineers
- Own SAST/DAST/SCA tooling: selection, tuning, CI/CD integration, and triage
- Partner with Engineering teams to establish secure coding standards and provide hands-on guidance
- Team building events
- We strive to create a welcoming, inclusive environment where every team member feels valued and diversity is celebrated.
Requirements
- Threat modeling experience with Product and Engineering teams
- Familiarity with AWS and Kubernetes security controls as they relate to application-layer risks
- Working knowledge of how LLMs introduce new attack surfaces and how to mitigate them, with practical experience using AI tools in security or engineering workflows
- Production Python experience with the engineering depth to review code meaningfully and build security tooling; Java or Rust is a bonus
- Significant hands-on application security experience, ideally at a SaaS company, including working knowledge of established standards (OWASP Top 10, API Security Top 10, ASVS, SPVS, AISVS) and how common vulnerability classes manifest in production systems
- Experience building security tooling or automation (scripts, pipelines, libraries)
- Demonstrated experience reviewing API designs and implementations for auth anti-patterns, token mismanagement, injection risks, and sensitive data exposure
Nice to have
- Production Python experience with the engineering depth to review code meaningfully and build security tooling
Compensation
- That approach has earned Tatari broad industry recognition, including being named Best CTV AdTech Platform in the 8th annual MarTech Breakthrough Awards, as well as honors from Digiday ( Best Connected TV Platform), AdExchanger ( Most Innov
Benefits
- Equity compensation
- Health insurance coverage for you and your dependents
- 401K, FSA, and commuter benefits
- $1,000 annual continued education benefit
- $500 Newbie Productivity Perk
- Unlimited PTO and sick days
- Monthly Company Wellness Day Off
- Java or Rust is a bonus
Company info
- Tatari is on a mission to revolutionize TV advertising.
- Founded in 2016 to help transform the antiquated world of TV advertising through the intelligent application of AI and machine learning, Tatari helps some of the world's fastest growing brands including Chime, Calm, Tecovas, Manscaped, Saatva, and Liquid I.V., reach their customers using linear and streaming TV ads.
- Our platform combines sophisticated media buying with proprietary analytics to turn TV advertising into an automated, digital-like experience, enabling businesses of any size to advertise on TV.
- That approach has earned Tatari broad industry recognition, including being named Best CTV AdTech Platform in the 8th annual MarTech Breakthrough Awards, as well as honors from Digiday ( Best Connected TV Platform), AdExchanger ( Most Innovative TV Advertising Technology ), and Business Insider ( Hottest AdTech Companies).
- Tatari has also been recognized as the Best Place to Work by Inc.
- Backed by an executive team of former founders and senior leaders from companies including Shazam, TrueCar, AdapTV, LiveRail, Amazon, Google, Meta, Microsoft, and Yahoo, Tatari continues to scale rapidly as TV advertising enters its next major era.
- We're a late-stage AdTech company with a recently attained SOC2 Type II attestation, and a clear mandate to mature our security and privacy posture.
- We're looking for the right engineer to make it happen.
- At Tatari, we believe in the importance of cultivating teams with diverse backgrounds and offering equal opportunities to all.
This listing is sourced directly from Tatari's careers page and normalized into a canonical job model.