Security Engineer III

Job Summary

Focused on enhancing secure software development practices, the remote full-time Security Engineer III will manage security risks related to open-source software, validate vulnerabilities, and integrate security controls into CI/CD pipelines while collaborating with cross-functional teams.

Key responsibilities

• Monitor and manage security risks associated with open-source software dependencies and third-party components
• Triage and validate vulnerabilities across applications, prioritizing by exploitability and business impact
• Integrate security controls into CI/CD pipelines and automate vulnerability scanning and reporting

Required qualifications

• 5+ years of experience in Product Security, Application Security, DevSecOps, or Vulnerability Management
• 3+ years of hands-on experience with application security testing tools (SAST, DAST, SCA)
• 2+ years in vulnerability management, including triage and remediation coordination
• Familiarity with CVEs, CVSS scoring, and software supply chain security
• Bachelor's degree in Computer Science, Engineering, or equivalent experience