Security Engineer

Job Summary

To enhance product safety, the full-time Security Engineer will work remotely or onsite to investigate vulnerabilities, collaborate with developers on secure design and testing, and build reusable security controls across various product areas.

Key responsibilities:

• Investigate vulnerability reports and assess technical impacts while routing confirmed work to the appropriate product owner
• Collaborate with developers on secure design, threat models, code reviews, and regression tests for high-risk product areas
• Build and improve reusable security controls and automation for vulnerability discovery and remediation

Required qualifications:

• Strong software engineering experience with a focus on product or application security
• Practical knowledge of common application-security risks, including authentication, access control, and API security
• Experience with threat modeling, security testing, and vulnerability analysis
• Ability to read and modify production code and tests while explaining risks to engineers
• Familiarity with PHP and experience in security automation tools is advantageous