Senior Application Security Engineer

Experience building security programs at an early-to-mid stage company, taking a function from reactive to systematic

Experience with SaaS security posture management, CSPM, or identity threat detection

Familiarity with securing LLM-based tooling, agentic workflows, or internal AI platforms

Detection engineering experience (SIEM/MDR, high-signal alerting)

Fintech or financial services environment experience

Offensive security background (pentesting, bug bounty, red team) that informs how you defend

Competitive salary and equity package

Unlimited PTO + paid company holidays

Access to holistic medical, dental, and vision plans

Company 401(k), Commuter, and HSA/FSA plans

NYC office in the heart of Manhattan

Lunch and snacks provided in the office

You will execute the security strategy set by our Director of IT & Information Security and our CTO, with day-to-day work centered on identifying vulnerabilities, remediating them, and closing the longer-term gaps that make us exposed, both in our product and in the SaaS tools our teams use every day.

Savvy is an AI-forward company.

Most of our engineering is AI-assisted, and we enable people across the business, including non-technical roles, to build with AI coding tools.

Your job is to make it safe: setting security hygiene standards in our codebases, building guardrails around AI-assisted development, and partnering closely with our internal AI team so that speed and security move together.

This is purely technical security work: finding and eliminating the vectors that make us vulnerable.

Own vulnerability management end to end: identify, triage, prioritize by real-world risk, and drive remediation to closure across our product, codebases, and cloud infrastructure (AWS, GCP, Cloudflare)

Wealth management is a $545 billion industry that still runs on manual work. 75% of advisors offer no digital communication beyond email, and most still build financial plans by hand in Excel. Savvy is reinventing what it looks like to be a financial advisor. Founder Ritik Malhotra saw the fragmentation firsthand after seeking out his own advisor, and started Savvy to give independent advisors a modern, AI-native home.

Savvy is a registered investment advisor (RIA), and we partner with experienced financial advisors who want to grow without running the back office themselves. Advisors bring their book and join Savvy, running under their own brand (or ours), and Savvy earns a percentage of the assets they manage. In return, they get a true business-in-a-box: a proprietary tech platform and client portal, an in-house marketing team that helps them grow, a world-class investment management team, and a dedicated client services team that runs day-to-day operations and support. Advisors at Savvy service up to 50% more households and save 19 hours a week.

AI runs through everything we do. On the product side, Savvy Intelligence (released April 2026) is the only AI built for wealth managers that can see a client's complete financial picture. Internally, everyone at Savvy uses Claude and is encouraged to experiment with it, backed by a dedicated AI enablement team and a RevOps org building agents in-house.

We're a Series B company hitting our stride, with roughly 150 employees and over 500% year-over-year growth, backed by $105M from Thrive Capital, Index Ventures, Canvas Ventures, and Mark Casady (former CEO of LPL Financial). Come help us scale!