Senior Application Security Engineer

About SpotOn: We’re not just building restaurant tech, we’re giving independent restaurants the tools to compete and win. From our award-winning point-of-sale to AI-powered profit tools, everything we do helps operators boost profit, work smarter, and keep their best people. And every solution is backed by real humans who actually give a sh*t about helping restaurants succeed.

Named the #1 Restaurant POS by G2 (Summer 2026), based on ratings from real users Rated the top-rated point-of-sale (POS) for restaurants, bars, retail, and small businesses by Capterra users Awarded Great Places to Work and Built In’s Best Workplaces for multiple years running We move fast, care hard, and fight for independent restaurant operators to do what they love, and love doing it. If you’re looking to make an impact with heart and hustle, SpotOn is the place for you. About the Role: SpotOn's Information Security team is hiring a Senior Application Security Engineer to own and mature our application security program.

This role maintains the security scanning pipeline (SAST, DAST, dependency, and secrets detection), leads third-party penetration testing engagements, and drives forward newer initiatives like AI/ML pen testing and threat modeling. This person will own program measurement and reporting, building the metrics that demonstrate how our AppSec initiatives are performing and translating that into executive-ready reporting for our Head of Security. This includes defining the right metrics,