Golang Job: Application Security Engineer

Application Security Engineer – Remote (U.S.-based) 

Vaco is partnering with a high-growth SaaS company focused on modernizing the customer payments experience across industries. Their platform is built for scale, powering secure, API-driven payment flows that touch millions of users monthly. Following a recent funding round and continued growth, they’re looking to backfill a key AppSec position supporting secure code delivery across a fast-moving engineering org.

This role is remote and reports directly to the CISO. We're looking for a mid-to-senior level AppSec-minded software engineer with strong communication skills and production-grade Golang experience.

---

What You’ll Be Doing

• Review application code (primarily Golang) and identify security flaws before they hit production

• Run and analyze SAST/DAST scans in the CI pipeline—surface and validate real risks

• Partner directly with dev teams to fix vulns with empathy, speed, and clarity

• Support secure design of API integrations and microservices

• Contribute to improving secure coding standards and processes

• (Bonus) Participate in threat modeling as the team matures toward a proactive posture

---

What We’re Looking For

• Strong engineering background with real-world experience in Golang

• AppSec experience—code reviews, vuln triage, secure design, and remediation

• Knowledge of secure coding practices, authentication, and API security

• Experience with CI/CD pipelines and automated testing environments

• Familiarity with SAST/DAST tools (you’re not building them, just running and reading)

• Bonus for prior exposure to Ruby, React, or Rails, and/or threat modeling experience

• A steady, tactful communicator—able to work cross-functionally and guide others

---

Compensation & Perks

• Base salary: $140,000 – 160,000

• Equity in a fast-scaling SaaS company

• 100% covered medical, dental, vision

• Monthly home office & tech stipends

• 401k, parental leave, and flexible PTO

• Quarterly team offsites & remote-first culture

Determining compensation for this role (and others) at Vaco/Highspring depends upon a wide array of factors including but not limited to the individual’s skill sets, experience and training, licensure and certifications, office location and other geographic considerations, as well as other business and organizational needs. With that said, as required by local law in geographies that require salary range disclosure, Vaco/Highspring notes the salary range for the role is noted in this job posting. The individual may also be eligible for discretionary bonuses, and can participate in medical, dental, and vision benefits as well as the company’s 401(k) retirement plan.