Application Security Engineer

📋 Description

• Conduct security architecture reviews and threat modeling for new features.
• Perform vulnerability assessments of software and systems to surface weaknesses.
• Triage and remediate vulnerabilities from bug bounty programs within SLAs.
• Influence engineering by design and roadmap reviews and communicating security constraints.
• Investigate product security incidents using logs and monitoring tools to assess scope and root cause.
• Develop and deliver training on secure coding, threat modeling, and emerging threats.

🎯 Requirements

• 5+ years in application or product security with design reviews, threat modeling, and vulnerabilities.
• Strong software engineering with Python and JavaScript/TypeScript or Scala.
• Deep knowledge of OWASP Top 10 and common web vulnerabilities (XSS, CSRF, SSRF, SQLi).
• Experience with SAST/DAST, SCA, and vulnerability management tools.
• Proven ability in security design reviews for distributed apps and remediation at scale.
• Excellent communication and collaboration across technical and non-technical partners.

🎁 Benefits

• Health insurance with dental and travel coverage.
• Breakfast and lunch when working from the office.
• Vacation allowance and career growth budget.
• Home office setup budget and gym membership.
• Mental health support and group life insurance.
• MacBooks with all necessary accessories.