Senior Security Engineer

Job Summary

Focused on enhancing product security, the full-time Senior Security Engineer will manage application security toolchains, build security automation, and run threat models while collaborating with engineering teams in a remote environment.

Key responsibilities

• Own the application security toolchain, including SAST, SCA, and DAST, ensuring effective configuration and management
• Build security automation using Python or TypeScript to streamline policy checks and remediation processes
• Run threat models and design reviews for new services and AI features, improving security engagement throughout the product lifecycle

Required qualifications

• 6+ years in software or security engineering, with at least 3 years in application or product security
• Hands-on experience with GitHub Actions and CI/CD pipelines, including knowledge of pipeline attack defenses
• Proficiency in running SAST and SCA programs across multiple repositories, focusing on exploitability
• Experience in penetration testing and DAST, with a strong understanding of the OWASP Top 10
• Hands-on experience securing LLM applications against various security threats