Posted 10 days ago
Senior Application Security Engineer
@ Accelerant
Remote in Canada
Overview
Accelerant, a data-driven risk exchange for specialty insurance, is hiring a Senior Application Security Engineer within Production Engineering. The role owns application, API, cloud and CI/CD security, manages the external penetration testing program, and drives Critical and High vulnerability remediation with development squads. The posting states five or more years of application security experience and does not state pay or schedule.
Responsibilities:
- Own application security across web apps, APIs and CI/CD pipelines
- Manage external penetration testing program and vendor relationships
- Drive closure of Critical and High vulnerabilities with development squads
- Maintain WAF, API security and rate-limiting controls
- Support threat modeling, design reviews and incident response
Requirements summary:
- 5+ years in application security, product security or DevSecOps
- Knowledge of web and API security and OWASP Top 10
- Experience with vulnerability scanning tools such as Snyk or Qualys
- Experience with AWS and Kubernetes/EKS
- Python scripting experience preferred
- OSCP or equivalent certification preferred
Tools & skills
Source and dates
Employer career site / ATS feed · rippling
- Employer posting date
- 2026-10-27
- First seen by our source
- 2026-10-28
- Source record updated
- 2026-10-28
These dates describe the source record, not a live verification that the employer is still hiring. Check the original posting.
Job details
| Seniority | Senior |
| Department | Software development |
| Experience | 5+ years |
| Hours per week | 40 (estimated) |
| Work setting | Office, Home |
| Position | Mostly sitting |
| Physical demands | physical low · computer high |
| Languages | English |
Summary and details written by AI from the posting; the employer’s posting is the authority.
Accelerant
Saved company profile
Historical company information from a saved The Jobs API profile (LinkedIn/Crunchbase fields). It is not live-verified; figures may have changed. Missing values remain unknown.
We are building the infrastructure specialty insurance will run on
Full company description
Accelerant is a data-driven risk exchange built for specialty insurance. We partner with leading MGAs and specialty underwriters, providing access to risk capital and the technology needed to grow efficiently. Our platform ingests and analyzes underwriting data to generate insights that help participants make better decisions, reduce friction, and unlock growth. By connecting underwriting expertise with high-fidelity data and aligned capital, we’re helping reshape how specialty insurance works.
- LinkedIn followers
- 109,130
- People associated on LinkedIn
- 636
- Reported office locations
- Atlanta, US
- London, GB
- Colchester, GB
- Valletta, MT
- Hamilton, BM
- Brussels, BE
- Toronto, CA
- Business categories
- InsurTech
- Insurance
- Analytics
- Other recorded names
- Accelerant
- Profile identifies a recruitment agency
- No
- Reported total investment
- 343,000,000
Currency and observation date were not supplied; this is not a current valuation or a funding round.
Accelerant is a data-driven risk exchange built for specialty insurance. We partner with leading MGAs and specialty underwriters, providing access to risk capital and the technology needed to grow efficiently. Our platform ingests and analyzes underwriting data to generate insights that help participants make better decisions, reduce friction, and unlock growth. By connecting underwriting expertise with…
| Field | Value |
|---|---|
| Industry | Insurance |
| Company size | 501-1,000 employees |
| Headquarters | Atlanta |
| Organization type | Public Company |
| Year founded | 2018 |
| Open jobs on Jobsy | 3 |
| View page |
About Accelerant
Accelerant is a data-driven risk exchange connecting underwriters of specialty insurance risk with risk capital providers. Accelerant was founded in 2018 by a group of longtime insurance industry executives and technology experts who shared a vision of rebuilding the way risk is exchanged – so that it works better, for everyone. The Accelerant risk exchange does business across more than 20 different countries and 250 specialty products, and we are proud that our insurers have been awarded an AM Best A- (Excellent) rating. For more information, please visit www.accelerant.ai.
About the Position
The Senior Application Security Engineer is a hands-on role within Production Engineering, responsible for improving the security of Accelerant's applications, APIs, cloud services, and software delivery practices.
The role combines application security engineering, vulnerability management, penetration testing, security automation, application perimeter protection, and close partnership with development squads.
A key responsibility will be turning security findings into completed remediation. The successful candidate will work directly with development squads to prioritize and close Critical and High vulnerabilities, using proactive processes and security AI agents to improve triage, exploitability analysis, remediation guidance, and verification.
Role Expectations
• Own and improve application security practices across web applications, APIs, services, and CI/CD pipelines.
• Manage the external penetration testing program, including planning, scoping, scheduling, vendor engagement, communications, findings review, remediation tracking, and retesting.
• Broker the relationship between development teams and third-party penetration testing providers to ensure clear expectations, effective testing, and timely closure of findings.
• Work directly with development squads to prioritize and close Critical and High CVEs and other significant application security findings.
• Build proactive vulnerability remediation processes using approved security AI agents and automation.
• Operate and improve SAST, DAST, SCA, container, secrets, and vulnerability-scanning capabilities within development workflows.
• Maintain and continuously improve WAF policies, application perimeter protections, API security policies, filtering, and rate-limiting controls.
• Support threat modeling, secure design reviews, vulnerability assessments, incident response, and secure coding practices.
• Work with Compliance to gather and maintain evidence supporting ISO 27001, SOX, and SOC 1/2 requirements.
• Partner with Development, Architecture, Cloud/DevOps, Compliance, and other Security disciplines to embed security into delivery practices.
• Provide clear security guidance, documentation, reporting, and education to technical teams.
Technical Skills and Related Experience Required
• 5+ years of experience in application security, product security, DevSecOps, or a related discipline.
• Strong understanding of web application and API security, authentication, authorization, sessions, common attack patterns, and the OWASP Top 10.
• Experience managing external penetration testing or similar third-party security assessment programs.
• Experience with vulnerability management and security-scanning tools such as Snyk, Qualys, Trivy, Dependabot, GitHub Advanced Security, or equivalent platforms.
• Experience integrating security controls into CI/CD pipelines and development workflows.
• Experience with WAF policy management, API security, virtual patching, filtering, rate limiting, and application perimeter protection.
• Practical experience with cloud security, preferably AWS and Kubernetes/EKS.
• Experience with security automation, scripting, or programming, preferably Python.
• Strong communication and relationship-management skills, with the ability to work effectively with developers, vendors, and control owners.
Nice to Have Skills
• Experience using AI-enabled security tooling or automation to support vulnerability triage and remediation.
• Cloudflare Zero Trust and Cloudflare Edge experience.
• OSCP, OSCP+, or an equivalent security certification.
• OSCP, OSCP+, or an equivalent security certification is preferred.
Journal
Only you can see this. Kept on this device, and in your account when you sign in.