InfoSec - Application & Cloud Security Engineer (L2)

📋 Description

• Perform manual and automated code reviews with Sr AppSec engineer
• Triage, reproduce, and remediate findings from SAST/DAST/SCA and bug bounty/internal reports
• Support threat-modeling sessions for new services and features
• Tune and maintain AppSec tooling in CI/CD to minimize noise
• Partner with engineering pods to fix issues the right way the first time
• Cloud Security duties: IAM reviews, Kubernetes hardening, WAF tuning

🎯 Requirements

• 2–4 years of hands-on experience in AppSec or Cloud Security
• Solid grounding in OWASP Top 10, TLS/PKI, OAuth/JWT, cloud patterns
• Exposure to both AppSec and CloudSec; capable in at least one in each
• Scripting in Python, Go, or Bash to build internal tools
• Clear communicator who translates findings for engineers
• Hungry to learn, takes feedback, and owns ramp

🎁 Benefits

• Competitive salary and benefits package
• Equity in a rapidly growing company
• Opportunity to work in fast-paced fintech startup
• Real growth path to develop into L3 specialist
• Collaborative work culture with growth focus