Job Application for Senior Application Security Engineer at CharterUP

New

About CharterUP. CharterUP is transforming the $450+ billion group transportation and mobility market with an AI native platform that powers modern charter, shuttle, and emerging autonomous vehicle operations. Trusted by many Fortune 500 companies, CharterUP connects enterprises, institutions, and event organizers to thousands of bus operators nationwide, while increasingly serving as the operating system for large scale shuttle and transit programs across airports, campuses, industrial sites, and major events.

Through real time availability, transparent pricing, intelligent routing, and AI driven dispatch and optimization, CharterUP replaces a fragmented and opaque industry with automation, accountability, and scale.

Why Join Us

Innovative Impact: Be part of the team that's revolutionizing group travel, setting new standards in an industry overdue for change.
Growth Opportunities: As a hyper growth company and one of the fastest-growing companies recognized by Inc., there’s no better time to join our dynamic, growth-stage organization.
Driven Team: Collaborate with some of the most driven minds in tech, all while working in a remote-first environment with a tech hub in Austin, TX.
Funding and Stability: Our $60 million Series A funding was just the start—we’re poised for even greater expansion, and you can be part of this exciting journey. CharterUp has achieved this growth profitability and efficiently, ensuring long-term stability.

About the Role

CharterUP is seeking a Senior Application Security Engineer to raise the bar on how we build and ship secure software. This is a dedicated security role on the Platform Engineering team. Our applications handle customer PII, passenger manifests, trip and location data, and payment flows, and they enforce authorization boundaries between thousands of parties in a two-sided marketplace. You'll be the technical leader on application security here, setting our standards, defining what "secure enough to ship" means, owning security decisions in design and code review, and driving vulnerabilities through remediation. Expect to split your time roughly evenly between building security tooling and automation and conducting threat modeling, design reviews, and targeted code reviews.

Title: Senior Application Security Engineer

Reports to: Engineering Manager

Location: Austin, TX (Hybrid: Monday, Wednesday, Friday in-office)

What You’ll Do

Own security tooling and vulnerability management across SAST, dependency and container scanning, secret detection, and penetration testing, including triage, routing, and remediation SLAs
Lead security design reviews, threat modeling, and targeted manual code reviews for high-risk systems, including authentication, authorization, payments, and customer data
Identify and prevent multi-tenant authorization vulnerabilities across quoting, booking, and trip workflows through scalable patterns and automated testing
Strengthen AWS security through IAM and account boundary design, secrets management, workload protection, and comprehensive logging
Scale security across engineering by building secure defaults, reusable libraries, automation, and developer guardrails, and establishing a security champions practice

What You’ll Bring

5+ years of experience in software engineering or security, including 3+ years in application or product security
Strong software engineering skills in Java and/or TypeScript, with experience building production-grade security tooling, automation, libraries, and developer-facing solutions
Deep expertise in application security, including threat modeling, secure system design, authentication, authorization, access control, injection, SSRF, and manual code review; familiarity with security and compliance standards, including SOC 2, PCI DSS, and GDPR is a plus.
Hands-on experience with AWS and cloud-native security, including IAM, multi-account architecture, containerized workloads, CI/CD security, and vulnerability management
Strong technical judgment and influence, with the ability to set security standards, prioritize risk, and drive remediation across engineering teams without direct authority

Recruiting Process

Step 1 - Video call: Talent Acquisition interview
Step 2 - Video call: Technical interview
Step 3 - Video call: Team interviews
Step 4 - Offer & reference check
Welcome aboard!

Global Benefits & Perks at CharterUP

We believe great people can live anywhere—and they deserve great benefits, too. While offerings may vary slightly by location, we prioritize hiring near our hubs in Austin, Atlanta, Miami, and Denver as we grow our global team.

Flexible Work Model: CharterUP operates as a remote-first company, with select roles requiring regular, in-office presence based on team and business needs. Role-specific expectations will be shared during the hiring process. U.S.-based employees may reside in any of our 19 approved states.
Comprehensive Health & Wellness: Medical, dental, and vision insurance, mental health support, virtual care, gym discounts, and family-building benefits. In the U.S., we cover 100% of premiums for employees. International benefits align with local standards.
Time Off to Recharge: Paid time off so you can truly unplug. U.S.: 15 PTO days (increasing to 20 after 2 years) + 8 paid holidays. International policies vary by country.
Financial Peace of Mind: Company-paid life, short-term, and long-term disability insurance where available.
Performance-Driven Culture: Join a fast-moving, ambitious, and collaborative team that wins together.
Referral Rewards: Earn bonuses for bringing top talent to the team.
Planning for the Future: Long-term financial planning support. U.S.: 401(k) plan. International: region-specific savings programs where applicable.
Top-Tier Tech: Choose a Mac or PC, plus monitor, keyboard, and mouse to hit the ground running.

CharterUP is an Equal Opportunity Employer. We are committed to creating an inclusive, accessible, and respectful workplace. We consider all qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity or expression, age, national origin, ancestry, disability, medical condition, marital status, veteran status, or any other protected characteristic in accordance with applicable federal, state, and local laws in the United States and Canada. If you require accommodation during the recruitment process, please let us know. CharterUP is committed to providing reasonable accommodations during the hiring process. If you need assistance or an accommodation, please contact your recruiter.

Hiring Locations: CharterUP U.S.-based candidates and employees must reside in one of the following states: Arizona, Colorado, Florida, Georgia, Hawaii, Mississippi, Missouri, North Carolina, New Hampshire, Nevada, New York, Oklahoma, South Dakota, Tennessee, Texas, Utah, Washington, and Wyoming.

We hire in the U.S. and Canada and are actively expanding our global footprint.

First Name

Last Name

Country

Phone

Location (City)

Resume/CV*

Accepted file types: pdf, doc, docx, txt, rtf

Cover Letter*

Accepted file types: pdf, doc, docx, txt, rtf

School

Select...

Degree

Select...

Current Company

State of Residence

Select...

LinkedIn Profile

How did you hear about CharterUP?

Select...

If you were referred by a CharterUP employee, please provide their name below.

Are you legally authorized to work for any employer in the United States?

Select...

Will you now or at any time in the future require CharterUP to sponsor or petition for an employment-based visa or work authorization in order for you to continue working for CharterUP?

Select...

What are your compensations expectations? Please provide a range.

This role is hybrid and requires working from our Austin, TX office on Monday, Wednesday, and Friday. Are you currently located in Austin or willing to relocate prior to your start date?

Select...

Have you worked in a Series A, B, or C startup? If yes, please list the startups.

Briefly describe your experience building security tooling or automation using Java and/or TypeScript.

Briefly describe your experience with threat modeling, security design reviews, and AWS/cloud security.

U.S. Standard Demographic Questions

We invite applicants to share their demographic background. If you choose to complete this survey, your responses may be used to identify areas of improvement in our hiring process.

How would you describe your gender identity?

Select...

How would you describe your racial/ethnic background?

Select...

How would you describe your sexual orientation?

Select...

Do you identify as transgender?

Select...

Do you have a disability or chronic condition (physical, visual, auditory, cognitive, mental, emotional, or other) that substantially limits one or more of your major life activities, including mobility, communication (seeing, hearing, speaking), and learning?

Select...

Are you a veteran or active member of the United States Armed Forces?

Select...

Voluntary Self-Identification

For government reporting purposes, we ask candidates to respond to the below self-identification survey. Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiring process or thereafter. Any information that you do provide will be recorded and maintained in a confidential file.

As set forth in CharterUP’s Equal Employment Opportunity policy, we do not discriminate on the basis of any protected group status under any applicable law.

Gender

Select...

Are you Hispanic/Latino?

Select...

Race & Ethnicity Definitions

If you believe you belong to any of the categories of protected veterans listed below, please indicate by making the appropriate selection. As a government contractor subject to the Vietnam Era Veterans Readjustment Assistance Act (VEVRAA), we request this information in order to measure the effectiveness of the outreach and positive recruitment efforts we undertake pursuant to VEVRAA. Classification of protected categories is as follows:

A "disabled veteran" is one of the following: a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or a person who was discharged or released from active duty because of a service-connected disability.

A "recently separated veteran" means any veteran during the three-year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service.

An "active duty wartime or campaign badge veteran" means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.

An "Armed forces service medal veteran" means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.

Veteran Status

Select...

Voluntary Self-Identification of Disability

Form CC-305

Page 1 of 1

OMB Control Number 1250-0005

Expires 07/31/2029

Why are you being asked to complete this form?

We are a federal contractor or subcontractor. The law requires us to provide equal employment opportunity to qualified people with disabilities. We have a goal of having at least 7% of our workers as people with disabilities. The law says we must measure our progress towards this goal. To do this, we must ask applicants and employees if they have a disability or have ever had one. People can become disabled, so we need to ask this question at least every five years.

Completing this form is voluntary, and we hope that you will choose to do so. Your answer is confidential. No one who makes hiring decisions will see it. Your decision to complete the form and your answer will not harm you in any way. If you want to learn more about the law or this form, visit the U.S. Department of Labor’s Office of Federal Contract Compliance Programs (OFCCP) website at www.dol.gov/ofccp.

How do you know if you have a disability?

A disability is a condition that substantially limits one or more of your “major life activities.” If you have or have ever had such a condition, you are a person with a disability. Disabilities include, but are not limited to:

Alcohol or other substance use disorder (not currently using drugs illegally)
Autoimmune disorder, for example, lupus, fibromyalgia, rheumatoid arthritis, HIV/AIDS
Blind or low vision
Cancer (past or present)
Cardiovascular or heart disease
Celiac disease
Cerebral palsy
Deaf or serious difficulty hearing
Diabetes
Disfigurement, for example, disfigurement caused by burns, wounds, accidents, or congenital disorders
Epilepsy or other seizure disorder
Gastrointestinal disorders, for example, Crohn's Disease, irritable bowel syndrome
Intellectual or developmental disability
Mental health conditions, for example, depression, bipolar disorder, anxiety disorder, schizophrenia, PTSD
Missing limbs or partially missing limbs
Mobility impairment, benefiting from the use of a wheelchair, scooter, walker, leg brace(s) and/or other supports
Nervous system condition, for example, migraine headaches, Parkinson’s disease, multiple sclerosis (MS)
Neurodivergence, for example, attention-deficit/hyperactivity disorder (ADHD), autism spectrum disorder, dyslexia, dyspraxia, other learning disabilities
Partial or complete paralysis (any cause)
Pulmonary or respiratory conditions, for example, tuberculosis, asthma, emphysema
Short stature (dwarfism)
Traumatic brain injury

Disability Status

Select...

PUBLIC BURDEN STATEMENT: According to the Paperwork Reduction Act of 1995 no persons are required to respond to a collection of information unless such collection displays a valid OMB control number. This survey should take about 5 minutes to complete.

Senior Application Security Engineer

Global Benefits & Perks at CharterUP

Apply for this job

U.S. Standard Demographic Questions

Voluntary Self-Identification

Voluntary Self-Identification of Disability