Staff+ Application Security Engineer - M&A

📋 Description

• Lead pre-close security due diligence for acquisitions.
• Coordinate external pen tests and threat modeling of targets.
• Drive post-close integration for acquired codebases.
• Onboard acquired codebases to remediation and reporting systems.
• Formalize the M&A security playbook, risk model, and tooling.
• Contribute to core AppSec projects between deals.

🎯 Requirements

• Hands-on application and infrastructure security in cloud and containers.
• Ability to rapidly assess unfamiliar codebases/architecture and deliver clear risk assessments.
• Production-quality coding in Python, Go, Rust, or TypeScript.
• Practical threat modeling and vulnerability identification skills.
• Comfort operating with high autonomy, ambiguity, and confidential context.
• Clear written and verbal communication across varied audiences.

🎁 Benefits

• Remote-friendly environment with travel as needed.
• Optional equity donation matching.
• Generous vacation and parental leave.
• Flexible working hours.
• Lovely office space for collaboration.
• Comprehensive benefits package.