Full Stack Security Engineer

Job Summary

Seeking a Full Stack Security Engineer for a full-time remote position, this role focuses on securing customer-facing products, APIs, and internal services through proactive threat modeling, vulnerability remediation, and the implementation of DevSecOps practices.

Key responsibilities:

• Lead threat modeling, architecture reviews, and code reviews for web applications and APIs
• Develop and commit code to fix security vulnerabilities in Python, Go, or JavaScript/TypeScript codebases
• Implement and manage security testing tools within CI/CD pipelines to identify vulnerabilities early in the software development lifecycle

Required qualifications:

• 5+ years of experience in application or product security, or as a software engineer with a security focus
• Strong programming skills in Python, Go, JavaScript/TypeScript, or similar modern stacks
• Deep understanding of web application vulnerabilities and API security
• Hands-on experience with offensive web security testing tools
• Experience in building and maintaining automated security pipelines (DevSecOps)