Application Security Engineer

To help keep everyone safe, we encourage all applicants to pay close attention to protect themselves during their job search. When applying for a position online you are at risk of being targeted by malicious actors looking for personal data. Please be aware we will only reach out via email using the domain quanata.com. Anything that does not match those domains should be ignored and considered a security risk.

About Us

Quanata is on a mission to help ensure a better world through context-based insurance solutions. We are an exceptional, customer centered team with a passion for creating innovative technologies, digital products, and brands. We blend some of the best Silicon Valley talent and cutting-edge thinking with the long-term backing of leading insurer, State Farm.

Learn more about us and our work at quanata.com   Our Team   Quanata, LLC is an insurance technology innovation company that engineers advanced risk prediction and prevention solutions, develops risk-focused acquisition capabilities, and builds/supports a full-stack, flexible, digital & increasingly AI-native insurance platform. This helps our primary clients, State Farm and HiRoad Assurance Company, adapt to evolving market needs. Quanata, LLC is wholly owned and funded by State Farm.

As a company that prioritizes an inclusive and positive culture, we believe the core of our success is in hiring talented people — across disciplines — who want to help us make a quantifiable impact.

The Role

We're looking for an Application Security Engineer to help build secure-by-default products and services across Quanata's AI-native insurance technology platform. In this role, you'll partner closely with Product, Engineering, and Security teams to identify risks early, strengthen secure development practices, and ensure our applications are resilient, scalable, and compliant.

You'll play a key role in embedding security throughout the software development lifecycle while helping teams move quickly and safely.

Your Day-to-Day

• Partner with Product and Engineering teams to integrate security into application design and development
• Lead threat modeling exercises and identify practical security solutions for complex systems
• Conduct secure code reviews, application security assessments, and vulnerability analysis
• Develop and implement automated security guardrails across the SDLC
• Investigate, prioritize, and drive remediation of application security findings
• Promote secure coding practices through training, coaching, and awareness initiatives
• Collaborate with Security, Privacy, and Business Assurance teams to support compliance and risk management objectives