Application Security Engineer

About Owner.com Owner is the AI growth system for local restaurants. Our AI continuously improves SEO, marketing, and online ordering to grow first-party orders. Unlike other companies that force small business owners to master their software to drive sales, Owner gives them a proven system run by experts. Owner is like having an army of engineers and marketers on your side, just like the big chains. Our vision We're starting by helping independent restaurants succeed online. But it's not just restaurants that need our help. Most local businesses are struggling with these same problems. Huge technology corporations are taking their customers, bleeding their profits, and making it hard for them to survive. Once we nail the solution for restaurants - we'll scale it into every other local business type. In the future we envision, tens of millions of local business owners will use our technology to succeed in the digital age. Read our Series C memo here Our traction Since 2020, we've generated tens of millions in revenue and processed over half a billion dollars of online orders. 1 in 5 Americans have used an Owner.com website. More importantly, we've helped over 20,000 restaurant owners, and saved them nearly $200 million in fees. Our team Our team is now in the low hundreds. We've got top talent from the most successful companies in SMB software, including: Shopify, HubSpot, DoorDash, ServiceTitan, Rappi, Faire and Stripe. We'll be scaling even faster in 2026 to keep pace with our customer growth. Where we work Owner is a remote-first, global company headquartered in San Francisco, with a sales hub in Toronto. For a few of our roles we prioritize in-person collaboration at one of our office locations. Most of our teammates are distributed throughout the globe. Please review the role description and discuss with your recruiter for more details on location! Why we're looking for you We are seeking a highly skilled Application Security Engineer (AppSec Engineer). The AppSec Engineer will with engineering teams to conduct application security testing, remediation and prevention across our entire product line. The AppSec Engineer is a critical part of protecting the pursuit of Owner's mission. This role is 100% remote and can be based anywhere in the United States or Canada, or anywhere in Mexico or Colombia. The impact you will have • Secure Owner's Product Line • Enable teams to move fast without exposing Owner to additional risk. • Protect our customers by helping prevent fraud and abuse within our product lines. • Make Owner's development process more delightful, efficient and secure. Who you'll work with • This role has a company wide impact and will work cross functionally across the entire organization. • Engineering Teams • Customer Support Teams What we're looking for • Exceptional application security testing capabilities • Experience working with / testing start ups in this capacity • Bonus: Background in Bug Bounty and Exploit development • Experience writing and deploying code in a production environment • Flexible problem solving • Strong written and verbal communication skills • Deep sense of personal ownership and accountability • Builder mentality • Nice to Haves: • Experience with B to C business models and the associated security considerations • Experience with alerting and detection within an application environment • Experience with detection and prevention of fraud / abuse • Experience with payment security / financial security. Pay and benefits • The estimated base salary for this role is in the local equivalent of $190,000 to $220,000 USD • Other benefits include comprehensive health coverage, remote-first work environment, unlimited PTO - plus extra fun perks! Notice - Employment Scams Communication from our team regarding job opportunities will only be made by an Owner team member with an @owner.com email address. We do not conduct interviews over email or chat platforms, and we will never ask you to provide personal or financial information such as your mailing address, social security number, credit card numbers or banking information. If you believe you are being contacted by scammer, please mark the communication as "phishing" or "spam" and do not respond. Apply for this job Apply tot his job