ABOUT THIS ROLE

As an Application Security Engineer at LVT, you will be a cornerstone of our commitment to building secure-by-design technology. You will partner deeply with our Engineering and Product teams to weave advanced security protocols into every layer of our Software Development Lifecycle (SDLC). This isn’t just about finding bugs; it’s about architecting a proactive security culture and scaling our defenses alongside our rapid growth. You will serve as a technical expert, mentor, and advocate, ensuring our AI-driven platform remains as resilient as it is innovative.

This role is based in-office out of our Headquarters in American Fork, Utah.

ROLE RESPONSIBILITIES

• Strategic Integration: Partner with Product and Engineering to embed reproducible, high-standard security practices directly into the SDLC.
• Defense Engineering: Develop and maintain sophisticated manual and automated security processes to identify, evaluate, and mitigate risks across our software ecosystem.
• Offensive Security: Lead proactive security initiatives including threat modeling, deep-dive code reviews, and offensive security exercises/penetration testing.
• Vulnerability Management: Architect and manage the deployment of vulnerability scanning tools, driving the remediation process to ensure rapid resolution of identified issues.
• Policy Stewardship: Assist in the development and continuous improvement of secure development policies and procedural documentation.
• Technical Translation: Communicate complex vulnerability details and risk assessments to both technical and non-technical stakeholders, ensuring organizational alignment.
• Security Culture: Mentor junior team members and foster a strong, transparent security culture across the company.
• Impact Measurement: Success in this role is measured by the reduction of critical vulnerabilities in production, the speed of remediation cycles, and the successful adoption of security tools by the broader engineering team.

OUR IDEAL CANDIDATE

• Proven Experience: At least 2+ years of professional experience in an Information Security role with a focus on modern application environments.
• Cloud Proficiency: 2+ years of hands-on security experience with AWS and other cloud service platforms.
• Modern Stack Familiarity: Comfortable navigating common web languages and frameworks such as HTML, PHP, Node.js, React.js, Nest.js, and Next.js.
• Pipeline Expertise: A solid understanding of CI/CD tools including GitHub, Docker, Jfrog, CircleCI, and ArgoCD.
• Technical Depth: A comprehensive understanding of common application vulnerabilities (OWASP Top 10) and the tools used to combat them (SAST, DAST, SCA).
• IT Foundations: Strong grasp of IT fundamentals, including operating systems, networking protocols, and the OSI model.
• Compliance Awareness: Familiarity with security frameworks such as CIS, NIST, or ISO/IEC 27001.
• Exceptional Communicator: Ability to articulate risk with clarity and professional poise, maintaining high levels of personal integrity.
• Preferred Credentials: A degree in IT/Security or industry certifications such as Security+, OSCP, GPEN, or ITCA are highly valued.
• Regulatory Experience: Prior experience working within compliance frameworks like SOC2 or FedRAMP is a plus.

BENEFITS

We believe you do your best work when your whole life is supported. We invest in our crew’s health, families, and financial futures with a benefits package designed to support you inside and outside the office.

LVT IS PROUD TO BE AN EQUAL OPPORTUNITY EMPLOYER. 

All applicants will be considered for employment without attention to race, color, religion, sex, sexual orientation, gender identity, national origin, veteran or disability status. All candidates must pass a drug screening and background check upon employment. Some roles may also require passing a federal background check and fingerprinting. Must be authorized to work in the U.S. If reasonable accommodation is needed to participate in the job application or interview process, and/or to perform essential job functions, please reach out to your recruiter.

We're looking for an Engineering Manager I to lead one of our autonomous feature squads. You'll own the day-to-day engineering leadership of a cross-functional team (1 PM, 1 Designer, 4–5 engineers) responsible for a meaningful area of the Shopmonkey platform. This is not a "project manager with an engineering title" role. You are technical, you are in the code, and you care deeply about how software gets built — not just that it ships. You won't be on the critical path for planned project work, but you'll be deeply involved in guiding your team through every phase of the SDLC: scoping, design, implementation, testing, release, and iteration. Your job is to make your team faster, sharper, and more effective — by coaching, unblocking, and identifying the gaps nobody else sees. You'll also contribute directly to the codebase. Not as a primary feature developer, but as a force multiplier — proactively improving code quality, tackling the work that falls between the cracks, and leading by example when it matters.

Our platform is built on two primary monorepos (backend and frontend) using TypeScript throughout. The stack includes React, Node.js, Next.js, Redux, and Redis on the application side; CockroachDB and ClickHouse for data; Synadia NATS for messaging; and GCP for infrastructure. We use OpenTelemetry and Prometheus for observability, with supporting services in TypeScript and Go. We don't expect expertise across all of these — we're looking for strong fundamentals and the ability to learn quickly.

What you will do:

• Lead a feature squad end-to-end: people, process, and technical direction.
• Own performance management for your engineers — regular 1:1s, growth conversations, honest feedback, and formal reviews.
• Partner closely with your PM and Designer to shape quarterly project plans that balance customer value, technical health, and business impact.
• Guide your team through the full SDLC — you should be competent and opinionated at every stage, from system design through production observability.
• Contribute to the codebase as a technical force multiplier: filling gaps, improving quality, and modeling engineering standards.
• Operate within our quarterly planning and 2-week cycle cadence, helping your squad maintain focus and predictability.
• Build and maintain a healthy remote-first team culture — clear communication, strong async habits, and flexibility balanced against team needs.
• Participate in hiring — sourcing, interviewing, and closing engineering talent for your squad and the broader org.

We are looking for people who have:

• 2+ years of formal engineering management experience, leading a team of software engineers through shipping production software.
• A strong technical foundation — you've built and operated production systems and can earn credibility with senior ICs through your technical judgment.
• Proven ability to coach and develop engineers across multiple levels.
• High emotional intelligence and communication skills. You navigate ambiguity, give hard feedback with care, and build trust quickly — especially important in a remote environment.
• Sound business judgment — you understand why the team is building what it's building, and you push back when priorities don't make sense.
• Experience working in cross-functional product teams (PM, Design, Engineering).
• Comfort with remote-first work across time zones. You value flexibility but put team needs first.

In the United States, the range is typically a salary of $145,000 to $180,000 + bonus + equity + benefits. The range provided is Shopmonkey’s reasonable estimate of the base compensation for this role. The actual amount will be based on job-related and non-discriminatory factors such as location, experience, training, skills, and abilities. Consult with your Recruiter during the initial call to determine a more targeted range based on these job-related factors. In addition to this base compensation company stock options and benefits as outlined below are included.