Security Engineer - AppSec

📋 Description

• Review red team findings before they reach engineers: reproduce them, cut false positives, set
• Harden our backend services and APIs, especially the money-moving paths. You'll often write the fix
• Own edge defenses: DDoS protection, rate limiting, WAF rules, and abuse controls
• Write secure configuration baselines for our cloud, code, and SaaS, and turn them into automated
• Grow our PR security gate so more bugs are blocked before merge
• Own attack surface coverage, and run architecture reviews on new and high-risk systems

🎯 Requirements

• 4+ years in application security, product security, or security-minded backend engineering
• You've owned security decisions. You can tell a senior engineer their design needs to change and
• You can read an unfamiliar codebase (TypeScript/Node.js) and find the bug that matters, and you
• Hands-on cloud security (ideally GCP), Terraform, and edge defenses like WAFs and rate limiting
• Experience with threat models or architecture reviews. You've run tool bake-offs and dropped tools
• You'd rather ship a check than write a document, and you use AI tools heavily without trusting them

🎁 Benefits

• Unlimited time off
• Flexible working
• Easy to access benefits
• Retirement goals
• Equity plan
• Health and Wellness