Security Engineer

📋 Description

• Perform weekly code reviews to catch vulnerabilities.
• Track, prioritize, and remediate vulnerabilities across the stack.
• Coordinate external security audits and penetration tests.
• Maintain risk register and update GRC documentation.
• Run phishing simulations and security training (via Riot).
• Own monitoring of security channels and alerts, incl. weekend coverage.

🎯 Requirements

• Solid experience in application security (code review, vulnerability management).
• Coordinating or conducting penetration tests and security audits.
• Comfortable shipping code with Git/GitHub workflows.
• Scripting/automation skills.
• Bonus: AI/LLM security concepts familiarity.
• Strong communication and collaboration (English).

🎁 Benefits

• Contract type: flexible, B2B preferred.
• Fully remote/work from anywhere.
• 4 weeks PTO per year.
• Annual in-person gathering.
• Health & wellness: 100 USD monthly and OpenUp access for family.
• Learning budget + equipment allowance.