Staff Security Engineer

Job Summary

Seeking a highly-skilled Staff Security Engineer to work remotely, who will manage the security and integrity of applications and software systems, build a vulnerability management pipeline, and execute the application security program while collaborating closely with engineering teams.

Key responsibilities

• Own the configuration, tuning, and management of the SIEM solution, diagnosing unusual threats and developing alerts for security incidents
• Conduct architecture, code, and infrastructure configuration reviews, performing penetration testing to identify and resolve vulnerabilities
• Maintain and optimize a vulnerability management CI/CD pipeline, partnering with development and infrastructure teams to enforce secure coding practices

Required qualifications

• Proficiency in one or more programming languages such as Ruby, Java, Python, C#, or Node.js
• Expertise in managing SIEM solutions with a focus on effective alerting
• Strong knowledge of Docker and Kubernetes, with experience in automated container vulnerability management
• Mastery of SAST, DAST, and IAST tools, along with manual validation testing skills
• Deep understanding of security principles, including OWASP Top 10 and secure coding practices