Webflow - Senior Application Security Engineer

• You bring 5+ years of application security experience, including hands-on software development, and have worked on securing high-complexity, large-scale applications. • You have experience in secure software design, secure coding, and modern web application security, with ability to identify security design flaws and business-logic vulnerabilities, and to drive risk-based remediation with engineering teams. • You have led threat modeling efforts, and/or conducted penetration testing, or manage third-party pentests, ensuring findings are clearly documented, communicated, and remediated to completion. • You have managed one or more of application security programs or tooling initiatives such as SCA Supply Chain, SAST, DAST and /or led bug bounty programs • You have contributed to security controls within large-scale solutions, including designing and/or delivering security features directly into applications (e.g., authorization models, security controls, or admin-level protections) in close collaboration with engineering and partner orgs. • You have experience using and building automation that leverage agentic AI, including applying AI coding agents to scale security reviews, detection, and automation responsibly. • You have participated in response efforts for application security incidents, from triage and containment through remediation and post-incident improvements • Stay curious and open to growth — actively building fluency in emerging technologies like AI to unlock creativity, accelerate progress, and amplify impact. • Our Core Behaviors: • Build lasting customer trust. We build trust by taking action that puts customer trust first. • Win together. We play to win, and we win as one team. Success at Webflow isn't a solo act. • Reinvent ourselves. We don't just improve what exists, we imagine what's possible. • Deliver with speed, quality, and craft. We move fast because the moment demands it, and we do so without lowering the bar.