Prepin
Log in
Spotnana

engineering opportunity

Security Engineer II

The Security Engineer II will conduct application-level security assessments, including threat modeling and penetration testing, to improve the platform's security posture. They will also collaborate with R&D teams to implement secure SDLC practices and provide guidance on remediating security vulnerabilities.

United StatesremoteFULL_TIME

Posted

About the role

What will you do at Spotnana?

The opportunity ahead

Spotnana is seeking an Security Engineer II to join our global Security team. As

an Security Engineer II focused on Application Security, you will be responsible

for improving Spotnana’s security and privacy position across our platform. As a

hands-on engineer, you will work closely with Spotnana Engineering and Product

teams to expand our secure SDLC, own our API security and penetration testing

processes, and advocate for best-practices across our codebase including

incorporation of security reviews earlier in our development cycle. The ideal

candidate has a strong engineering background and is passionate about working

cross-functionally with R&D teams to deliver secure, scalable solutions while

being able to describe the business value provided by reducing risks.

How you'll help us build

* Conduct application level security assessments (threat modeling, code

reviews, penetration testing) of both internal tools and external Spotnana

web and mobile applications

* Provide supporting guidance for bug-fixes on issues found through various

channels (customer reported, internal testing, tools, external pen tests etc)

* Incorporate AI tools to accelerate our ability to detect and address

application security vulnerabilities

* Develop API Security best practices

* Implement SAST, DAST, RAST, IAST and related tools to identify security bugs

earlier in the release cycle

* Deliver training and awareness forR&D on security issues

* Be part of incident response team where application level context and triage

is necessary to contain an issue

* Collaborate with security compliance functions to align technical controls

with compliance requirements

Experience you bring

* 3+ years of previous web and mobile application security assessment

experience

* Experience securing Java-based, API -driven microservices deployed in a cloud

environment

* Experience with React (JS) for frontend and Java for backend services

* Previous experience implementing secure SDLC practices, and automations such

as SAST, DAST, RAST, IAST in at least medium scale software development

organizations

* Ability to write code in one or more programming languages

What to expect next

Selected candidates will participate in cross-functional virtual interviews

exploring their relevant experience, approach to problem solving, critical

thinking, and alignment with Spotnana’s core values. Interviews will include

face-to-face conversations as well as coding exercises to demonstrate your

ability.

Work Authorization: This position is not eligible for employment-based visa

sponsorship. Candidates must be legally authorized to work in the United States

and must not require current or future employment sponsorship.

Let’s talk compensation

Spotnana strives to offer fair, industry-competitive, and equitable

compensation. Our total compensation package includes base salary, an annual

performance bonus, company equity, and comprehensive benefits. We use trusted

third-party market data to establish compensation ranges that are competitive

for the role, industry, company size, and geographic market, while maintaining

internal equity across our team.

Compensation

is determined based on a variety of factors, including skills,

experience, qualifications, and work location. The anticipated annual base

salary hiring ranges for this role are:

* New York Metro Area, San Francisco Bay Area, Seattle Metro Area:

$126,000-$170,000

* California, New Jersey, Washington, New York, Washington, D.C.,

Massachusetts, Connecticut: $120,500-$163,000

* Hawaii, Alaska, Maryland, Illinois, New Hampshire, Oregon, Colorado,

Virginia, Delaware, Minnesota, Rhode Island, Pennsylvania, Texas:

$115,000-$155,000

* All other U.S. states: $109,500-$147,000

Actual compensation may vary based on individual qualifications and the

applicable geographic market.

We care for the people who make everything possible - our benefits offerings

include:

* Equity in the form of stock options, which provides partial ownership in the

company, so you can share in the success of the company as it grows

* Pre-tax and ROTH 401(k) options via Fidelity with up to a 4% company match

* Comprehensive benefit plans covering medical, dental, vision, life, and

disability effective on your hire date. We cover 100% of your employee

premiums and 85% of your eligible dependents

* Pre-tax flexible spending account options for health, dependent care, and

commuter expenses

* Flexible PTO in addition to 10 company holidays and an end-of-year company

shutdown

* Up to 26 weeks of Parental Leave

* Monthly cell phone/internet stipend

* Extra perks — IATAN travel membership, pet insurance, financial wellness

tools, Calm app access, and more

Which skills does this role require?

Application securityThreat modelingCode reviewsPenetration testingAPI securityJavaReactSASTDASTRASTIASTCloud securityMicroservicesSecure SDLCIncident responseSecurity complianceSecurity EngineerApplication SecuritySDLCAPI SecurityPenetration TestingThreat ModelingCode ReviewCloudIncident ResponseComplianceSecurity AssessmentVulnerability ManagementAI ToolsSoftware DevelopmentCybersecurityJavaScript

Make your next move

Build a shortlist and prepare

Identify the requirements you can demonstrate, then choose examples from your work to discuss with the hiring team.

Review the responsibilities and requirements before adding an opening to your shortlist.

Role information can change. Confirm current details on the original application page.

Product

AI Candidate AgentCompaniesBrowse JobsInterview QuestionsDeep ProfileSkill AssessmentOpportunity Matching
Prepin.ai

© 2026 Prepin | All rights reserved.