Role Summary
Wolfe is a Pittsburgh-based FinTech company building the next generation of financial products, and we are embedding AI across our products and processes - which you'll help keep secure alongside everything else we ship. As an Application Security Engineer I, you'll report to our Head of Offensive Security and spend your days working shoulder-to-shoulder with developers: reviewing code, running the vulnerability management program, managing dependency risk, and supporting red team and penetration-testing work. This role is built for a developer - whether you're a software engineer moving into security or an early-career security engineer growing into AppSec, you'll learn offensive security and enterprise tooling hands-on, with mentorship and support to earn certifications.
This is an on-site position in Pittsburgh, PA.
- Run the vulnerability management program day-to-day - triage, prioritize, route, and track findings from Dependabot, SCA, SAST, DAST, and container scans through to remediation against defined SLAs.
- Own dependency and open-source risk: manage Dependabot alerts and pull requests across repositories, and partner with developers to upgrade, patch, or mitigate vulnerable libraries without breaking their builds.
- Support the Head of Offensive Security on red team exercises and penetration tests, including reconnaissance, hands-on testing under guidance, and writing up findings with clear reproduction steps and fixes.
- Perform code reviews and work directly in developers' repositories and CI/CD pipelines (GitHub or AWS) to catch and fix vulnerabilities early across application code, containers, and infrastructure as code.
- Integrate and improve automated security tooling (such as Snyk, Semgrep, Dependabot, or Cycode) in CI/CD, and automate findings triage and reporting.
- Apply and promote secure coding standards aligned to OWASP and the SANS CWE Top 25, and contribute to measuring DevSecOps maturity using a framework such as DSOMM or BSIMM.
Impact Statement
For more clarity on the role, below are the success metrics and measurements for this role in the first 90 to 120 days.:
- Clear the backlog of open Dependabot and dependency vulnerabilities to SLA across the priority repositories, partnering with developers to merge or mitigate fixes, and stand up weekly reporting on open findings and remediation KPIs.
- Integrate or meaningfully improve at least one automated security tool (SCA/Dependabot, SAST, DAST, or container scanning) in the production CI/CD pipeline, feeding a documented triage-to-remediation workflow.
- Participate hands-on in at least one red team or penetration-test engagement alongside the Head of Offensive Security, delivering documented findings with reproduction steps and remediation guidance.
- Establish a working cadence with the development teams - embedding in two dev pods' review and release processes so security findings get triaged and fixed as part of normal delivery.
- 4-5 years of experience in software development and security engineering, with hands-on coding experience.
- Experience reviewing and fixing code in one or more languages and comfort working directly in developers' repositories.
- Hands-on experience with vulnerability and dependency management - Dependabot, SCA tooling and tracking findings to remediation against SLAs.
- Working familiarity with offensive security concepts and tooling (penetration testing, OWASP Top 10, SANS CWE Top 25), and eagerness to grow red-team skills hands-on with support to earn certifications.
- Familiarity with CI/CD pipelines (GitHub or AWS), infrastructure as code (Terraform/Ansible), and containerized services on AWS.
- Willingness to work five days onsite in Pittsburgh and collaborate closely with developers and the security team.
Wolfe is committed to providing a comprehensive benefits package to support your well-being, along with competitive compensation. Our benefits and perks include but not limited to:
- Restricted Stock Units (RSUs)
- Profit Share
- Medical, Prescription, Vision, and Dental insurance for employees and dependents (Wolfe pays 80% of premium)
- Short-Term Disability Insurance (Wolfe pays 100% of premium)
- Voluntary Long-Term Disability Insurance, Life Insurance, Critical Illness Insurance, Accident Insurance, and Hospital Indemnity coverage
- PTO (vacation and sick time)
- Corporate Holidays and Floating Holidays
- 401(k)
- Employee recognition program
- Charitable Donation to a charity of your choice yearly
- Employee Referral Bonus
- Tuition Reimbursement
- Internal Training and Information sessions
- Family Picnic, Holiday Party, and other outings
- Internal Culture Club
Wolfe, LCC will NOT provide visa sponsorship for this position now or in the future.
Wolfe, LLC is a pioneering force in e-commerce since 1996 and the gifting industry, deeply rooted in Pittsburgh, Pennsylvania. Driven by our vision "To move humanity to express love for each other through personalized, faster, beautiful, secure, flexible gift giving," we're on a mission to revolutionize the way gifts are given and received. We achieve this through high-quality, fast service, and the same-day delivery of customized gift cards from our on-demand nations only robotic fulfillment center, alongside offering a safe and flexible card-to-card gifting technology.
At the heart of our success are our Core Values: Teamwork, Drive, Integrity, Caring, and Excellence. These principles guide us as we innovate and expand our portfolio with platforms and brands like PerfectGift, Gift Card Granny, GiftYa, Reaf Marketing, and Give InKind, setting new standards in the gifting experience.
Some of the Company and Executive Team Recognitions:
2023 Inc. 5000 list of fastest-growing private companies (ranked no. 382)
2022 - 1st place - Fastest 50 Growing Companies in Pittsburgh, Pittsburgh Business Times
2020 The Best Places to Work, Pittsburgh Business Times
2019 - Winner Carnegie Science Award, Entrepreneur Category
2017 - Winner of Outstanding Entrepreneur, Pittsburgh Venture Capital Association
2015 - Winner of Business Times Diamond Award, Business Ethics Award, Create Award
2015 CEO of the Year, Pittsburgh Technology Council
And more…