When applying for a position online you are at risk of being targeted by malicious actors looking for personal data. Anything that does not match those domains should be ignored and considered a security risk. Quanata is on a mission to help ensure a better world through context-based insurance solutions. We are an exceptional, customer centered team with a passion for creating innovative technologies, digital products, and brands. Quanata, LLC is an insurance technology innovation company that engineers advanced risk prediction and prevention solutions, develops risk-focused acquisition capabilities, and builds/supports a full-stack, versátil, digital & increasingly AI-native insurance platform. This helps our primary clients, State Farm and HiRoad Assurance Company, adapt to evolving market needs. As a company that prioritizes an inclusive and positive culture, we believe the core of our success is in hiring talented people — across disciplines — who want to help us make a quantifiable impact. As a Senior Application Security Engineer , you’ll be a key security partner to our web and backend engineering teams, helping build security into every stage of the software development lifecycle. You’ll work closely with a product portfolio to guide product security, with particular emphasis on AI/ML security considerations and collaboration with data science teams. You’ll bridge frontend, backend, and API security while helping engineers solve complex security challenges and strengthen secure development practices across the organization. Lead security design reviews and threat modeling for APIs, web features, and service integrations.



Review source code and deployment configurations to identify security vulnerabilities, and partner with developers to triage, remediate, and validate findings. Support application security integration reviews, SaaS security assessments, and open-source software reviews. Bachelor’s degree or equivalent relevant experience. ~6–8 years of experience in application security or full-stack development with security expertise. Strong understanding of secure coding practices in Python, JavaScript/TypeScript, Node.js, and web standards. Familiarity with application risks and vulnerabilities, including the OWASP Top 10 (web and GenAI LLM), API security, SSRF, and related security concerns. Experience with code scanning tools such as CodeQL, Wiz, SonarQube, or Snyk. Experience with GraphQL security. These include medical, dental, vision, life insurance and supplemental income plans for you and your dependents, a Headspace app subscription, monthly wellness allowance and a 401(k) Plan with a company match. Work from Home Equipment : Given our virtual environment— in order to set you up for success at home, a one-time payment of $2K will be provided to cover the purchase of in-home office equipment and furniture at your discretion. Personal and Professional Development:

Location:
We are a remote-first company for most positions so you may work from anywhere you like in the U.
Employees based in the San Francisco Bay Area or in Providence, Rhode Island may commute to one of our local offices as desired. Pursuant to the San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records.

📌 Senior Application Engineer (España)
🏢 Quanata
📍 España