Staff Security Engineer, Application Security Job at Fomo, New York, NY

MWtQVjMvT0RuNHE1MVBDQzVmL2pVV0dXK0E9PQ==
  • Fomo
  • New York, NY

Job Description

About fomo

  • fomo is a trading app for the rest of us. With fomo you can sign up in seconds and have instant access to any asset on-chain without the need for external wallets, bridges or prior knowledge. fomo has social features that are actually useful - follow top traders (with full access to their portfolio and trades) and find tokens early. fomo does all of this while providing the best-in-class execution and data for experienced traders.
  • In just over a year, fomo has onboarded over 2.5 million plus users who have collectively done over $14 billion dollars in trading volume.
  • fomo has made ~$68M of revenue since launching in May 2025, and has raised a total of ~$100M in addition from T1 investors. Investors include Benchmark, Index Ventures, and Union Square Ventures.
  • [
  • [

Want to learn more about the team, our growth, and life at fomo? Check out our [Work at fomo]( page.

About the role

  • We're hiring a Staff Security Engineer to own and elevate our application security program. This is a hands-on, high-leverage role for someone who wants to be the technical authority on how we build secure software, not just someone who reviews tickets after the fact. You'll work directly with the engineering team to find and fix vulnerabilities, build tooling that scales security across the org, and shape how fomo thinks about security at the architecture and code level.
  • This role skews heavily toward product and application security. You won't be spending your time on corporate IT, endpoint management, or employee-facing security operations. Instead, you'll be embedded in how our product is designed, built, and shipped.

What you'll do

  • Lead security architecture reviews and threat modeling for new features and major system changes, partnering directly with engineering and product teams from design through launch
  • Own our secure SDLC program: static and dynamic analysis (SAST/DAST), dependency and software composition analysis, secrets scanning, and CI/CD security gates
  • Perform deep-dive code reviews and manual penetration testing of high-risk services, APIs, and web applications
  • Design and build internal security tooling and guardrails that let engineers move fast without introducing risk
  • Run and mature our vulnerability management program, including triage, severity scoring, and driving remediation with engineering owners
  • Manage relationships with external pentest vendors and bug bounty programs, and turn findings into durable fixes rather than one-off patches
  • Set technical direction on authentication, authorization, API security, and data protection patterns used across the product
  • Mentor engineers on secure coding practices and act as a go-to resource for security questions across the org
  • Contribute to incident response when application-layer issues arise
  • Help define and evolve fomo's overall AppSec roadmap and metrics

What we're looking for

  • 7+ years in security engineering, with a substantial and recent focus on application security (not primarily corporate/IT security)
  • Deep hands-on experience with secure code review, threat modeling, and common vulnerability classes (OWASP Top 10, auth/session flaws, SSRF, injection, business logic flaws, etc.)
  • Strong software engineering background; comfortable reading and writing production code, not just running scanners
  • Experience building and scaling AppSec tooling and processes (SAST/DAST, SCA, CI/CD security integration) at a growing company
  • Track record of driving security into engineering culture through influence, not just gatekeeping
  • Familiarity with cloud-native environments (AWS/GCP/Azure), container security, and modern API architectures
  • Excellent communication skills; able to explain risk to both engineers and non-technical stakeholders
  • Prior experience as a technical lead or staff-level IC who can operate with high autonomy

Nice to Have

  • Experience with bug bounty program management
  • Background in a high-growth consumer or marketplace product

Why fomo

You'll be the first dedicated AppSec hire shaping the security foundation of a company at real scale, with the autonomy to set standards rather than inherit them.

Compensation and benefits

fomo offers:

  • Competitive cash compensation and equity

  • Comprehensive health insurance including medical, dental, and vision for you and your dependents; including tax savings benefits such as HSAs and FSAs

  • 401(k) with match

  • Group term life insurance

  • Flexible time off

  • Annual company offsites

Equal opportunity

fomo is an equal opportunity employer. We consider qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity or expression, national origin, age, disability, veteran status, or any other characteristic protected by applicable law. If you need a reasonable accommodation during the hiring process, please let us know.

Job Tags

Full time, Flexible hours

Similar Jobs

C. Harper CDJR - MonValley

Chrysler Certified Technician/Mechanic Job at C. Harper CDJR - MonValley

Get Paid What Youre Worth. Work Where Your Skill Matters. CDJR of The Mon Valley is hiring a Chrysler Certified Technician who knows their craft and expects to be treated like a professionalnot a number. If youre tired of weak pay plans, poor management, or shops... 

Pioneer Logistics

Seasonal Delivery Driver - Pioneer Logistics Job at Pioneer Logistics

Seasonal Delivery Driver Pioneer Logistics Pontiac, MI | Delivering in Clarkston, Lake Orion, Oxford, Metamora & Hadley Seasonal Employment: Beginning October 1, 2026 through January 31, 2027 Starting Pay: $23.25/hour Performance incentives + overtime opportunities...

Optum

Medical Assistant - Pediatrics Job at Optum

 ...us to start Caring. Connecting. Growing together. The Medical Assistant (MA) is responsible for performing patient-oriented procedures...  ...an ambulatory care setting as a Medical Assistant/EMT ~ Pediatric expereince ~ Electronic medical records (EMR) experience... 

Carrot

Remote Business Intelligence Analyst Job at Carrot

 ...fertility and family care platform, built on intelligent care orchestration: the right clinical...  ...Journal, NPR, ABC News, and Harvard Business Review as a leading voice on digital health...  ...is seeking a Business Intelligence Analyst to join our BI function as it scales to... 

CACI International Inc

Remote Entry Level Background Investigator - Midwest Job at CACI International Inc

 ...Job Title: Entry Level Background Investigator Midwest Job Category: Service Contract Act Time Type: Full time Minimum Clearance Required to Start: Top Secret Employee Type: Regular Percentage of Travel Required: Up to 10% Type...