Application Security Engineer

Who We Are

SmartRent (NYSE: SMRT) is revolutionizing how people live and work with the industry’s only end-to-end platform designed for the rental housing industry. By uniting purpose-built software, integrated hardware and full implementation and support in one ecosystem, we help owners and operators simplify operations, cut costs and deliver exceptional resident experiences. Recognized by Deloitte, HousingWire and the PropTech Breakthrough Awards, SmartRent is shaping the future of property technology and redefining what it means to make rental housing smarter.

Job Description

The Application Security Engineer is responsible for supporting the security and privacy of the SmartRent platform through the management of information security risk, system resilience, and compliance activities. This role uses cloud-native and third-party security tools to protect company assets and data across multiple platforms.

This role partners with engineering, development, and external stakeholders to implement and maintain security policies, processes, and standards, including secure software development lifecycle (SDLC) practices. Success in this role requires strong communication skills, the ability to coordinate across multiple technical teams, and the ability to support consistent security practices across the organization.

Open to candidates outside of Arizona

Responsibilities

• Develop and execute a comprehensive application security strategy aligned with business objectives and industry standards.
• Maintain and advise on secure coding standards, security documentation, and application security processes.
• Deliver application security and privacy training for development teams.
• Review source code to identify security vulnerabilities, insecure patterns, secrets exposure, and risks associated with AI-generated code.
• Triage, reproduce, and support remediation of application vulnerabilities (e.g., SQL injection, XSS, access control weaknesses) identified through automated tools (SAST, DAST, SCA) or manual analysis.
• Manage application security workflows, including task prioritization, ticket tracking, and coordination with development and DevOps teams.
• Maintain and enhance SmartRent’s responsible disclosure and vulnerability reporting program.
• Partner with developers to implement encryption, hashing, and secure key management practices.
• Collaborate with developers and engineering teams to perform threat modeling, identify attack paths, and assess weaknesses.
• Lead the investigation and mitigation of application-level security incidents, collaborating with the SOC and engineering teams to ensure rapid remediation and stakeholder communication.
• Provide guidance on security and privacy controls for cloud infrastructure (AWS), application development, and IoT hardware.
• Conduct regular application risk assessments to identify vulnerabilities and emerging threats.
• Research emerging cybersecurity risks and recommend mitigation strategies...