<div><p><strong>Who We Are</strong></p><p>SmartRent (NYSE: SMRT) is revolutionizing how people live and work with the industry’s only end-to-end platform designed for the rental housing industry. By uniting purpose-built software, integrated hardware and full implementation and support in one ecosystem, we help owners and operators simplify operations, cut costs and deliver exceptional resident experiences. Recognized by Deloitte, HousingWire and the PropTech Breakthrough Awards, SmartRent is shaping the future of property technology and redefining what it means to make rental housing smarter.</p></div><p><strong>Job Description</strong></p><p>The Application Security Engineer is responsible for supporting the security and privacy of the SmartRent platform through the management of information security risk, system resilience, and compliance activities. This role uses cloud-native and third-party security tools to protect company assets and data across multiple platforms.</p><p>This role partners with engineering, development, and external stakeholders to implement and maintain security policies, processes, and standards, including secure software development lifecycle (SDLC) practices. Success in this role requires strong communication skills, the ability to coordinate across multiple technical teams, and the ability to support consistent security practices across the organization.</p><p><strong>Responsibilities</strong></p><ul><li>Develop and execute a comprehensive application security strategy aligned with business objectives and industry standards.</li><li>Maintain and advise on secure coding standards, security documentation, and application security processes.</li><li>Deliver application security and privacy training for development teams.</li><li>Review source code to identify security vulnerabilities, insecure patterns, secrets exposure, and risks associated with AI-generated code.</li><li>Triage, reproduce, and support remediation of application vulnerabilities (e.g., SQL injection, XSS, access control weaknesses) identified through automated tools (SAST, DAST, SCA) or manual analysis.</li><li>Manage application security workflows, including task prioritization, ticket tracking, and coordination with development and DevOps teams.</li><li>Maintain and enhance SmartRent’s responsible disclosure and vulnerability reporting program.</li><li>Partner with developers to implement encryption, hashing, and secure key management practices.</li><li>Collaborate with developers and engineering teams to perform threat modeling, identify attack paths, and assess weaknesses.</li><li>Lead the investigation and mitigation of application-level security incidents, collaborating with the SOC and engineering teams to ensure rapid remediation and stakeholder communication.</li><li>Provide guidance on security and privacy controls for cloud infrastructure (AWS), application development, and IoT hardware.</li><li>Conduct regular application risk assessments to identify vulnerabilities and emerging threats.</li><li>Research emerging cybersecurity risks and recommend mitigation strategies as appropriate.</li><li>Perform adversarial testing and security validation of applications, including internal AI models and services.</li><li>Use cloud-native security tools to identify and secure large language model (LLM) integrations and implement appropriate security guardrails.</li></ul><p><strong>Required Qualifications</strong></p><ul><li>4–6 years of experience in application security, including development and maintenance of security policies and collaboration with engineering and release teams.</li><li>Experience identifying and remediating application vulnerabilities across modern programming languages, including Elixir, JavaScript, Ruby, Python, or similar languages.</li><li>Strong knowledge of OWASP Top 10, OWASP API Top 10, and modern authentication mechanisms, including JWT and OAuth.</li><li>Hands-on experience with application security tools, including SAST, DAST, and SCA platforms (e.g., GHAS, Burp Suite, Fortra, or similar tools).</li><li>Experience working with cloud security controls, including AWS-native tools, web application firewalls (WAF), or similar technologies.</li><li>Experience managing or supporting vulnerability disclosure or bug bounty programs.</li><li>Strong written and verbal communication skills, with the ability to clearly communicate security requirements to technical teams.</li><li>Demonstrated problem-solving and analytical skills in identifying and mitigating application security risks.</li></ul><p><strong>Preferred Qualifications</strong></p><ul><li>Industry certifications such as CSSLP, GIAC GWAPT, CEH, or equivalent security certifications.</li><li>Experience working with CloudFlare, AWS security services, or similar cloud-native security tools.</li><li>Experience integrating security practices into SDLC processes.</li><li>Experience supporting threat modeling or application security architecture reviews.</li></ul><div><div><h3><span style="color:#000000;">We Put Our Employees First</span></h3><p>We offer a comprehensive and competitive benefits package designed to support your well-being and future. For our US employees, this includes medical, dental, vision, and life insurance with low deductibles and 75–100% employer contributions. We also provide flexible and generous PTO (because we know how important work-life balance is), a competitive 401(k) with employer contributions, paid parental leave, discounted insurance plans for pets and legal services and an employee stock purchase plan to help you invest in your future.</p><h3>You’ll fit right in if you:</h3><ul><li><p>Do the hard work and go out of your way to deliver excellence</p></li><li><p>Own outcomes and learn from your mistakes</p></li><li><p>Are a collaborative and supportive team player—win or lose, you lift others up</p></li><li><p>Value authenticity, diverse perspectives, and inclusion in the workplace</p></li><li><p>Have a passion for smart tech and the real estate industry</p></li></ul></div><p><a href="https://smartrent.com/privacy/#:~:text=SmartRent%20values%20your%20privacy%20and,whom%20it%20may%20be%20shared.&amp;text=We%20collect%20personal%20information%20about,of%20our%20Site%20or%20Services.">Privacy Policy</a></p></div>

<p>SmartRent is the leading provider of smart communities and smart operations solutions for the rental housing industry. SmartRent's platform, comprised of smart hardware and cloud-based SaaS solutions, gives operators seamless visibility and control over real estate assets, empowering them to simplify operations, automate workflows, benefit from additional revenue opportunities and deliver exceptional site team and resident experiences. We serve 15 of the top 20 multifamily owners and operators, and our solutions enable millions of users to live smarter every day. For more information, please visit www.smartrent.com. Awards: Deloitte Technology Fast 500 List, 2023 Entrepreneur of the Year Pacific Southwest - CEO Lucas Haldeman, 2023 HousingWire Tech 100, 2021, 2022, 2023 #1 on Growjo's 100 Fastest Growing Companies in Arizona, 2021 Best Places to Work in Multifamily&reg;, 2021 Best Companies Multifamily Award, 2020 Forbes&rsquo; Next Billion-Dollar Startups, 2020 AZ Central Top Companies to Work for in AZ, 2020</p>

Application Security Engineer

<div><p><strong>Who We Are</strong></p><p>SmartRent (NYSE: SMRT) is revolutionizing how people live and work with the industry’s only end-to-end platform designed for the rental housing industry. By uniting purpose-built software, integrated hardware and full implementation and support in one ecosystem, we help owners and operators simplify operations, cut costs and deliver exceptional resident experiences. Recognized by Deloitte, HousingWire and the PropTech Breakthrough Awards, SmartRent is shaping the future of property technology and redefining what it means to make rental housing smarter.</p></div><p><strong>Job Description</strong></p><p>The Application Security Engineer is responsible for supporting the security and privacy of the SmartRent platform through the management of information security risk, system resilience, and compliance activities. This role uses cloud-native and third-party security tools to protect company assets and data across multiple platforms.</p><p>This role partners with engineering, development, and external stakeholders to implement and maintain security policies, processes, and standards, including secure software development lifecycle (SDLC) practices. Success in this role requires strong communication skills, the ability to coordinate across multiple technical teams, and the ability to support consistent security practices across the organization.</p><p><strong>Responsibilities</strong></p><ul><li>Develop and execute a comprehensive application security strategy aligned with business objectives and industry standards.</li><li>Maintain and advise on secure coding standards, security documentation, and application security processes.</li><li>Deliver application security and privacy training for development teams.</li><li>Review source code to identify security vulnerabilities, insecure patterns, secrets exposure, and risks associated with AI-generated code.</li><li>Triage, reproduce, and support remediation of application vulnerabilities (e.g., SQL injection, XSS, access control weaknesses) identified through automated tools (SAST, DAST, SCA) or manual analysis.</li><li>Manage application security workflows, including task prioritization, ticket tracking, and coordination with development and DevOps teams.</li><li>Maintain and enhance SmartRent’s responsible disclosure and vulnerability reporting program.</li><li>Partner with developers to implement encryption, hashing, and secure key management practices.</li><li>Collaborate with developers and engineering teams to perform threat modeling, identify attack paths, and assess weaknesses.</li><li>Lead the investigation and mitigation of application-level security incidents, collaborating with the SOC and engineering teams to ensure rapid remediation and stakeholder communication.</li><li>Provide guidance on security and privacy controls for cloud infrastructure (AWS), application development, and IoT hardware.</li><li>Conduct regular application risk assessments to identify vulnerabilities and emerging threats.</li><li>Research emerging cybersecurity risks and recommend mitigation strategies as appropriate.</li><li>Perform adversarial testing and security validation of applications, including internal AI models and services.</li><li>Use cloud-native security tools to identify and secure large language model (LLM) integrations and implement appropriate security guardrails.</li></ul><p><strong>Required Qualifications</strong></p><ul><li>4–6 years of experience in application security, including development and maintenance of security policies and collaboration with engineering and release teams.</li><li>Experience identifying and remediating application vulnerabilities across modern programming languages, including Elixir, JavaScript, Ruby, Python, or similar languages.</li><li>Strong knowledge of OWASP Top 10, OWASP API Top 10, and modern authentication mechanisms, including JWT and OAuth.</li><li>Hands-on experience with application security tools, including SAST, DAST, and SCA platforms (e.g., GHAS, Burp Suite, Fortra, or similar tools).</li><li>Experience working with cloud security controls, including AWS-native tools, web application firewalls (WAF), or similar technologies.</li><li>Experience managing or supporting vulnerability disclosure or bug bounty programs.</li><li>Strong written and verbal communication skills, with the ability to clearly communicate security requirements to technical teams.</li><li>Demonstrated problem-solving and analytical skills in identifying and mitigating application security risks.</li></ul><p><strong>Preferred Qualifications</strong></p><ul><li>Industry certifications such as CSSLP, GIAC GWAPT, CEH, or equivalent security certifications.</li><li>Experience working with CloudFlare, AWS security services, or similar cloud-native security tools.</li><li>Experience integrating security practices into SDLC processes.</li><li>Experience supporting threat modeling or application security architecture reviews.</li></ul><div><div><h3><span>We Put Our Employees First</span></h3><p>We offer a comprehensive and competitive benefits package designed to support your well-being and future. For our US employees, this includes medical, dental, vision, and life insurance with low deductibles and 75–100% employer contributions. We also provide flexible and generous PTO (because we know how important work-life balance is), a competitive 401(k) with employer contributions, paid parental leave, discounted insurance plans for pets and legal services and an employee stock purchase plan to help you invest in your future.</p><h3>You’ll fit right in if you:</h3><ul><li><p>Do the hard work and go out of your way to deliver excellence</p></li><li><p>Own outcomes and learn from your mistakes</p></li><li><p>Are a collaborative and supportive team player—win or lose, you lift others up</p></li><li><p>Value authenticity, diverse perspectives, and inclusion in the workplace</p></li><li><p>Have a passion for smart tech and the real estate industry</p></li></ul></div><p><a href="https://smartrent.com/privacy/#:~:text=SmartRent%20values%20your%20privacy%20and,whom%20it%20may%20be%20shared.&amp;text=We%20collect%20personal%20information%20about,of%20our%20Site%20or%20Services.">Privacy Policy</a></p></div>

Application Security Engineer

About the Job

About the Company

SmartRent

Similar Jobs

Principal Cloud Security Architect

Principal Cloud Security Architect

Senior Product Security Engineer

Senior Product Security Engineer

Senior Enterprise Application Security Engineer

Senior Enterprise Application Security Engineer

Third Party Risk Manager

Third Party Risk Manager

Security Analyst

Security Analyst

Principal, Security Engineer SOC

Principal, Security Engineer SOC

Principal, Security Engineer

Principal, Security Engineer

Senior Security Engineer

Senior Security Engineer

Lead Application Security Engineer

Lead Application Security Engineer

Security Engineer

Security Engineer