Senior Application Security Engineer

Job Summary

Seeking a full-time Senior Application Security Engineer, this remote position will contribute directly to the codebase, focusing on building secure application infrastructure using Node.js, React, and Python while defining secure coding practices and integrating security into CI/CD workflows.

Key responsibilities

• Contribute production-quality code to applications and infrastructure, implementing security fixes and hardening measures
• Define secure-by-design patterns and lead threat modeling for new and existing systems
• Perform penetration testing and manage the bug bounty program, addressing application security vulnerabilities

Required qualifications

• Demonstrable software engineering ability with experience in Node.js, React, and Python
• Expertise in web application security and secure-coding best practices
• Experience with integrating and maintaining SAST/DAST systems within CI/CD pipelines
• Hands-on experience securing cloud workloads on AWS and familiarity with infrastructure-as-code tools like Terraform
• Knowledge of cryptography, PKI, and TLS with practical implementation experience