Senior Security Engineer

As a seasoned security engineer, you'll play a pivotal role in shaping our platform's security posture and driving innovation.

This challenging position involves designing, developing, and maintaining secure platforms and tooling that empower our development teams to deliver software efficiently, while embedding security into every stage of the development lifecycle.

You'll take end-to-end responsibility for application security initiatives, including vulnerability remediation, conducting security reviews, and educating internal teams on secure coding practices and standards.

• Technical Leadership : Provide guidance and mentorship to engineers while working closely with cross-functional teams to integrate security seamlessly into development workflows.
• Cybersecurity Expertise : Contribute to the long-term vision for platform security, aligning efforts with organizational objectives and staying current with emerging technologies and trends.
• Incident Response : Proactively identify, investigate, and resolve security vulnerabilities across applications, infrastructure, and cloud environments.
• Security Governance : Lead efforts to detect, assess, and remediate infrastructure and software vulnerabilities, ensuring timely patching and mitigation in alignment with security policies.
• Collaboration : Work collaboratively with engineering, infrastructure, and compliance teams to ensure that platform capabilities and security measures align with broader organizational goals.

This role requires over 10 years of hands-on experience in DevSecOps and AppSecOps, with at least 5 years in application development using .NET and Java technology stacks.

You'll have a deep understanding of application, infrastructure, and cloud security principles. You should be able to lead technical initiatives, develop secure architecture patterns, and mentor engineering teams on secure development practices.

AWS and Azure expertise is required, along with proficiency in scripting (Python, Bash) and infrastructure-as-code tools like Terraform, Terragrunt, or CloudFormation. Familiarity with DAST, SAST, and IAST tools such as Burp Suite, Veracode, and Checkmarx is also necessary.

You must be comfortable working independently or collaboratively in fast-paced, high-stakes environments.