Application Security Engineer

Job Summary

A company is looking for an Application Security Engineer to enhance the security of their global PaaS platform.

Key Responsibilities

• Own the Cloudflare stack; monitor traffic patterns and implement real-time countermeasures against threats
• Lead the 3rd-party researcher program, triage reports, and implement immediate fixes to vulnerabilities
• Identify weaknesses through internal penetration tests and advocate for systemic fixes with engineering teams

Required Qualifications

• Experience with Cloudflare at scale (WAF, Workers, rate limiting, bot management)
• Experience with AWS security tooling (e.g., GuardDuty, IAM analysis)
• Familiarity with dependency and supply chain security practices
• Experience with bug bounty platforms (e.g., Intigriti, HackerOne)
• Compliance literacy in PCI DSS or SOC II frameworks