Platform Security Engineer

This is a fully remote position, open to applicants in Serbia.

📋 Description

• Enhance and sustain perimeter and network-layer security measures (WAF, Rate Limiting, Anti-bot, DDoS mitigation)

• Safeguard product APIs from abuse and irregular traffic patterns

• Fortify authentication, authorization, and access control at the product level, addressing IDOR-class vulnerabilities

• Oversee the Vulnerability Management process: detection, prioritization, and tracking remediation efforts

• Organize external penetration tests and facilitate the resolution of identified issues

• Lead Incident Response for security incidents related to products

• Develop detection and response protocols in collaboration with the monitoring team

• Participate in Fraud & Trust and Safety initiatives alongside relevant teams

• Ensure the protection of customer data at the product level (access control, encryption, masking)

• Implement the Security Champions program to educate product teams on secure development practices

• Oversee the Bug Bounty program

⛳️ Requirements

• Over 5 years of experience in information security, with at least 3 years focused on product security

• Practical experience managing a WAF (Wallarm / Akamai / Cloudflare)

• Knowledge of API security (OWASP API Security Top 10, API gateway familiarity)

• Experience with anti-bot technologies (fingerprinting, behavioral detection)

• Solid understanding of DDoS mitigation strategies (L3–L7)

• Background in managing a Vulnerability Management process (CVSS, prioritization, and remediation SLAs)

• Experience in coordinating penetration testing projects and interpreting pentest reports

• Familiarity with OAuth/OIDC, session management, and JWT

• Competent in SQL and Elasticsearch for log and data queries during investigations, monitoring, and reporting

🏝️ Benefits

• REMOTE OPPORTUNITY to work full-time;

• 28 calendar days of vacation per year;

• 7 wellness days per year (time off) for personal matters;

• Bonuses up to $5000 for successfully recommending candidates for positions within the company;

• 50% reimbursement for professional training, international conferences, and meetings;

• Corporate discounts for English language courses;

• Health benefits - up to $1,000 gross per year for health insurance or medical expenses;

• Workplace organization - reimbursement of workplace expenses up to $1000 gross every three years;

• An internal gamified gratitude system: earn bonuses from colleagues and exchange them for our merchandise.