Senior Security Engineer, Product & Application Security
Metropolis
$165,000 / year
Need a reasonable accommodation to apply or interview? Contact us.
JobMinglr uses automated technology to recommend jobs based on profile information and job preferences. Match Score does not determine eligibility for a position, prevent a user from viewing or applying to a job, or make hiring decisions on behalf of an employer.
Description
Who we are
The real world is the next frontier, and at Metropolis, we are creating the artificial intelligence to make it responsive. We are pioneering the Recognition Economy — a future where mundane repetition disappears and being known unlocks access, comfort and belonging everywhere you go. From transforming parking into a seamless drive-in, drive-out experience for millions of Members to expanding our intelligence layer across retail and hospitality, we are building a world that feels instinctive and magical. The future isn’t coming; it’s here, and we need builders, innovators and problem solvers to help us create it.
Who you are
Metropolis is seeking a highly technical, developer-oriented Senior Security Engineer to focus on securing our software engineering and product environments across web applications, mobile applications, APIs, AI/CV platforms, and cloud-native engineering systems. In this role, you will partner closely with AppDev, ATG, Corporate IT, Network Engineering, CCI, and Enterprise Systems to establish stronger application and product security maturity. You will play a key part in embedding security into engineering workflows, scaling security practices alongside our growing technology platforms, and collaborating directly with engineering teams on secure architecture and software security initiatives.
What you'll do
- Perform application security reviews and threat modeling
- Lead secure SDLC and DevSecOps initiatives
- Enhance CI/CD and software supply chain security
- Secure web, mobile, and API environments
- Drive product security engineering projects
- Develop security tooling and automation
- Advance AI/CV and emerging AI security initiatives
- Manage security testing and vulnerability remediation
- Facilitate developer security enablement and education
- Provide secure architecture guidance and design reviews
What we're looking for
- 6+ years of hands-on technical experience across Application Security and/or Software Development
- Strong hands-on execution focus, actively writing code, reviewing PRs, and remediating penetration test findings
- Demonstrate experience with DevSecOps and secure SDLC practices
- Show experience securing cloud-native distributed systems
- Maintain a strong understanding of modern application architectures and APIs
- Utilize experience with CI/CD security tooling
- Possess a strong scripting and software engineering background
- Partner closely with engineering organizations
- Experience leveraging AI tools to transform static workflows into responsive, high-output processes
While not required, these are a plus:
- Hold familiarity with AI/ML security concepts
- Bring experience in SaaS, consumer technology, or high-scale environments
4 Days in Office: Metropolis values in-person collaboration to drive innovation, strengthen culture, and enhance the Member experience. Our corporate team members hold to our office-first model, which requires employees to be on-site at least four days a week, fostering organic interactions that spark creativity and connection
When you join Metropolis, you'll join a team of world-class product leaders and engineers, building an ecosystem of technologies at the intersection of parking, mobility, and real estate. Our goal is to build an inclusive culture where everyone has a voice and the best idea wins. You will play a key role in building and maintaining this culture as our organization grows. The anticipated base salary for this position is $165,000.00 USD to $215,000.00 USD annually. The actual base salary offered is determined by a number of variables, including, as appropriate, the applicant's qualifications for the position, years of relevant experience, distinctive skills, level of education attained, certifications or other professional licenses held, and the location of residence and/or place of employment. Base salary is one component of Metropolis’s total compensation package, which may also include access to or eligibility for healthcare benefits, a 401(k) plan, short-term and long-term disability coverage, basic life insurance, a lucrative stock option plan, bonus plans and more. #LI-CM1 #LI-Onsite
Metropolis may utilize an automated employment decision tool (AEDT) to assess or evaluate your candidacy for employment or promotion. AEDTs are used to assist in assessing a candidate’s application relative to the required job qualifications and responsibilities listed in the job posting.
As part of this process, Metropolis retains data relevant to your candidacy, including personal information, for a period that is reasonably necessary for the use of the tool. If you are hired for the position, your data may become part of your employee records.
Metropolis Technologies is an equal opportunity employer. We make all hiring decisions based on merit, qualifications, and business needs — without regard to race, color, religion, sex (including gender identity, sexual orientation, and pregnancy), national origin, disability, veteran status, or any other protected characteristic under federal, state, or local law.
We are committed to providing a welcoming, accessible hiring experience. If you need a reasonable accommodation for any part of the application or interview process, please reach out to us at recruiting@metropolis.io.
Benefits
- 401(k)
- stock options
- life insurance
About this role
Metropolis is building AI-powered systems that transform how people interact with physical spaces, and they're looking for a Senior Security Engineer to embed security into their product and application environments. You'd work across web and mobile applications, APIs, AI/CV platforms, and cloud-native systems—partnering directly with engineering teams to establish stronger security practices and scale them as the company grows. This is a hands-on role where you'll conduct threat modeling and security reviews, lead DevSecOps initiatives, develop security tooling, and guide secure architecture decisions.
The position requires at least six years of technical application security or software development experience, with a strong focus on actually executing the work: writing code, reviewing pull requests, and remediating findings rather than just advising. You should have solid grounding in DevSecOps, secure SDLC practices, cloud-native systems, and CI/CD security tooling. Experience with AI/ML security concepts and work in high-scale SaaS or consumer technology environments would be advantageous. The role is based in Seattle and requires four days per week in office. The salary is fixed at $165,000 annually, with additional benefits including healthcare, 401(k), stock options, and bonus plans.
How this employer is doing
caution
- Legal Issue
This role's local market on JobMinglr
Pay for this role
$165,000 per year
That is the employer's posted range, and where you land in it is usually decided in one conversation. Before that conversation, run the numbers: analyze an offer for this role.
Before you apply, worth reading
How JobMinglr reads this job
Every listing here is scored against your profile before you apply: skills overlap, experience level, location and work arrangement, each weighted and explained. You see the score and the reasons, not just a list. How the matching works.