Application Security Engineer

About the role

HoneyBook is the leading AI-powered business management platform for service-based business owners. Designed to enhance - not replace - independent professionals. HoneyBook’s AI-powered tools help businesses attract leads, connect with clients, book projects, and manage payments more efficiently. With AI seamlessly integrated into every workflow, entrepreneurs can focus on their craft while scaling their businesses with confidence. Since its founding in 2013, HoneyBook has powered over 25 million client relationships and processed more than $12 billion in transactions, helping independent businesses grow faster and smarter.

Our culture is built on five core values that inform everything we do. We encourage collaboration, feedback, ownership, and maintain a growth mindset. We know experience comes in many forms - some visible on your resume, others not. No one candidate will be a 100% perfect match to our description, so if you thrive in a fast-paced, intellectually curious environment and have relevant experience, we encourage you to apply.

We’re looking for a Senior Application Security Engineer to join our Security Engineering team. This role is ideal for a hands-on security professional who is passionate about working closely with engineering teams to build agentic workflow that secure SDLC, patch new vulnerabilities and creates dynamic guardrails to the agentic engineering force across the organization

You’ll be responsible for shaping and owning our Secure Software Development Lifecycle (SSDLC), managing security tooling, and leading the assessment of application and API security across HoneyBook’s products and services.

Here are a few of the things you will do:

- Collaborate directly with engineering teams to define remediation strategies, orchestrate agentic workflows that apply security fixes across the application stack.

- Design, implement, and drive SSDLC guardrails across the company - from security design reviews and threat modeling to proactive triaging in production.

- Orchestrate agentic threat modeling, architecture reviews, and security assessments of cloud-based applications and services, including those leveraging emerging technologies.

- Manage HoneyBook’s bug bounty program, validating reports and coordinating response and resolution.

- Own and operate our suite of AppSec tools including SAST, ASPM, and other security scanners—triaging findings, prioritizing issues, and guiding engineering toward resolution.

- Act as the point of contact for findings from penetration tests, automated scanners, and external assessments, helping manage triage and ensure timely fixes.

- Continuously research and stay current with application security trends, frameworks, vulnerabilities, and best practices.

- Promote a strong security culture across HoneyBook by educating and enabling engineers, architects, and DevOps teams to build secure software from the ground up. Here's what we're looking for: