Application Security Engineer

👋 About Owner.comOwner is the all-in-one platform that restaurants use to succeed online.
Thousands of restaurant owners use our tools to build their website, drive online orders, create their own branded app, manage their customer relationships, and set up marketing automations.
You can think of it as Shopify meets HubSpot, but specifically for restaurants.
Learn more about the problems we are solving for our customers here.
🌎 Our visionWe’re starting by helping independent restaurants succeed online.
But it’s not just restaurants that need our help. Most local businesses are struggling with these same problems. Huge technology corporations are taking their customers, bleeding their profits, and making it hard for them to survive.
Once we nail the solution for restaurants – we’ll scale it into every other local business type.
In the future we envision, tens of millions of local business owners will use our technology to succeed in the digital age.
🚀 Our tractionIn just over 3 years we've generated tens of millions in revenue, served millions of guests, and processed hundreds of millions of online orders.
More importantly, we’ve helped thousands of restaurant owners save their businesses - and not  only survive, but thrive.
⭐ Our teamOur team grew from under 100 to nearly 200 talented people in 2024. We’ve got top talent from the most successful companies in SMB software, including: Shopify, HubSpot, DoorDash, ServiceTitan, Rappi, Faire and Stripe.
We’ll be scaling even faster in 2025 to keep pace with our customer growth.
🌆 Where we workOwner is a remote-first, global company headquartered in San Francisco, with a sales hub in Toronto. For a few of our roles we prioritize in-person collaboration at one of our office locations. Most of our teammates are distributed throughout the globe. Please review the role description and discuss with your recruiter for more details on location!
🔍 Why we’re looking for you
We are seeking a highly skilled Application Security Engineer (AppSec Engineer). The AppSec Engineer will with engineering teams to conduct application security testing, remediation and prevention across our entire product line. The AppSec Engineer is a critical part of protecting the pursuit of Owner’s mission.
This role is 100% remote and can be based anywhere in the United States or Canada, or anywhere in Mexico or Colombia.

💥 The impact you will have

• Secure Owner’s Product Line
• Enable teams to move fast without exposing Owner to additional risk.
• Protect our customers by helping prevent fraud and abuse within our product lines.
• Make Owner’s development process more delightful, efficient and secure.

🤝 Who you’ll work with

• This role has a company wide impact and will work cross functionally across the entire organization.
• Engineering Teams
• Customer Support Teams

✅ What we’re looking for

• Exceptional application security testing capabilities
• Experience working with / testing start ups in this capacity
• Bonus: Background in Bug Bounty and Exploit development
• Experience writing and deploying code in a production environment
• Flexible problem solving
• Strong written and verbal communication skills
• Deep sense of personal ownership and accountability
• Builder mentality
• Nice to Haves:
• Experience with B to C business models and the associated security considerations
• Experience with alerting and detection within an application environment
• Experience with detection and prevention of fraud / abuse
• Experience with payment security / financial security.

🏆 Pay and benefits

• The estimated base salary for this role is in the local equivalent of $190,000 to $220,000 USD
• Other benefits include comprehensive health coverage, remote-first work environment, unlimited PTO - plus extra fun perks!

🚩 Notice - Employment ScamsCommunication from our team regarding job opportunities will only be made by an Owner team member with an @owner.com email address.We do not conduct interviews over email or chat platforms, and we will never ask you to provide personal or financial information such as your mailing address, social security number, credit card numbers or banking information.  If you believe you are being contacted by scammer, please mark the communication as "phishing" or “spam” and do not respond.