Sr. Security Engineer

📋 Description

• Lead app security reviews, threat modeling, and secure code reviews for new features.
• Operate and improve SAST/DAST/SCA tooling; triage findings with engineering.
• Plan and execute penetration tests on web apps, APIs, and mobile clients.
• Own vulnerability management lifecycle from discovery to remediation validation.
• Develop secure coding standards, developer guidance, and training materials.
• Integrate security tooling into CI/CD, shift-left across the SDLC.
• Partner on security architecture decisions for new product capabilities.

🎯 Requirements

• 5+ years in application security with hands-on secure SDLC and offensive tests.
• Strong understanding of web app and API security (OWASP, MITRE, CIS).
• Experience operating SAST/DAST/SCA ASPM tools.
• Fluency in Python, JavaScript, Go, Ruby or similar.
• Experience designing and executing penetration tests for web and mobile apps.
• Familiarity with cloud security (AWS, GCP, OVH) and Kubernetes.

🎁 Benefits

• Comprehensive Medical, Dental and Vision plans starting day 1.
• 401(k) plan with a match.
• 10 paid holidays, 20 vacation days, 5 sick days, 3 floating holidays.
• Basic Life and AD&D Insurance covered by ButterflyMX.
• Short and Long Term Disability coverage.
• Paid Family Leave; Employee Assistance Program; Quarterly self-care stipends.