Job Opportunities API

Our Mission ButterflyMX is on a mission to empower people to automate property access, operations, and security from a single platform. Our products are installed in more than 20,000+ multifamily, commercial, gated communities, and student-housing properties worldwide, including properties developed, owned, and managed by the most trusted names in real estate. Our features are designed for developers, owners, property managers, and tenants, and our products lower operating costs and improve tenant satisfaction. Our Solution Developers and owners no longer need to run building wiring or install in-unit hardware. Property managers can grant building access, revoke permissions, and review entry logs from an online dashboard. Residents can open doors from their smartphones, issue visitor access, and see who is trying to enter the building. Our Culture & Values Fantastic people are the key to our success. As a distributed, primarily remote workforce, we’re looking for more intelligent, passionate, collaborative, ai-forward, and down-to-earth individuals to join our growing team. We’re driven by a shared commitment to excellence and innovation, grounded in our core values: We delight our customers, We take ownership, We are a community of collaborators, We speak up, We think big and do small, and We are tenacious. ROLE OVERVIEW ButterflyMX is looking for a Senior Security Engineer to join our growing security team. In this role you will drive application security across the full software development lifecycle — from threat modeling and secure code review to penetration testing and vulnerability management. You will build the internal tooling that powers the “defender’s loop” and scales security. You will partner with product teams to embed security into the development lifecycle and ensure reusable secure patterns. You will partner closely with engineering to build security in from the start, while also owning our active testing program to identify and remediate vulnerabilities before adversaries do. You will be the person engineers come to for clear and practical answers. This is an individual contributor role reporting directly to the CISO. You will help shape our security program as an early, senior hire. RESPONSIBILITIES - Lead application security reviews, threat modeling sessions, and secure code review for new features and significant product changes. - Operate and continuously improve SAST, DAST, and SCA tooling; triage and prioritize findings in partnership with engineering teams to harden the codebase. - Plan and execute internal penetration tests against web applications, APIs, and mobile clients; coordinate and support third-party assessments. - Own the vulnerability management lifecycle from discovery, prioritization, remediation tracking, through to validation. - Develop and maintain secure coding standards, developer security guidance, and training materials. - Integrate security tooling into CI/CD pipelines and champion shift-left security practices across the SDLC. - Investigate security incidents and bug bounty submissions; provide root cause analysis and remediation recommendations. - Partner with Product and Engineering on security architecture decisions for new product capabilities. - Stay current on emerging threats, CVEs, and attack techniques relevant to our technology stack and support continuous program improvement. REQUIREMENTS - 5+ years of experience in application security, with hands-on proficiency in both secure development lifecycle practices and offensive testing. - Strong understanding of web application and API security fundamentals (OWASP, MITRE, CIS, API-specific attack surfaces). - Experience operating SAST/DAST/SCA ASPM tools. - Fluency in scripting or development languages (Python, JavaScript, Go, Ruby, or similar) sufficient to review code and write internal tooling. - Experience designing and executing penetration tests against mo