Lead Engineer - AppSec

📋 Description

• Lead application security practices: Act as the technical security reference for Product and
• Conduct threat modeling: Facilitate threat modeling sessions for new features and architectural
• Perform security reviews and testing: Review application code and conduct manual security testing
• Strengthen automated security testing: Implement, maintain, and optimize Static Application
• Manage vulnerabilities end to end: Triage, prioritize, track, and coordinate remediation
• Establish security standards: Develop secure coding guidelines, checklists, and best practices

🎯 Requirements

• Extensive experience in application security or software development with a strong focus on
• In-depth knowledge of the OWASP Top 10, OWASP API Security Top 10, and common vulnerability
• Ability to read, understand, and review application code, preferably in JavaScript/TypeScript and
• Hands-on experience with application security testing tools such as Burp Suite, OWASP ZAP, Semgrep
• Proven experience integrating automated security checks into CI/CD pipelines, using tools such as
• Strong understanding of authentication and authorization protocols and mechanisms, including OAuth

🎁 Benefits

• Meal allowance through a Caju benefits card.
• Medical insurance fully funded for the employee, with co-payments applicable to eligible dependents.
• Dental insurance.
• Life insurance.
• Home office allowance.
• Physical wellness benefits through Wellhub and TotalPass.