Senior Application Security Engineer

This is a fully remote position, open to applicants in Estonia, +2 more countries.

📋 Description

• Automate security processes and tools within the CI/CD pipeline

• Integrate SAST, DAST, and SCA tools to mitigate various classes of security issues

• Oversee collaboration with external partners on security-centric code reviews and penetration testing

• Assess security findings and advise teams on their severity and resolution strategies

• Provide support to product and development teams regarding application security

• Perform threat modeling and conduct design reviews

• Manage and support the ongoing bug bounty initiative and security tools

• Assist the triage team while working with external researchers and the platform vendor

• Collaborate with development teams to validate reported vulnerabilities and ensure fixes effectively mitigate associated risks

• Drive initiatives to promote security best practices and cultivate a secure development culture

• Primarily focus on Windows application security, while also contributing to macOS, iOS, and Android security as necessary

⛳️ Requirements

• Extensive experience in securing Windows applications

• Proficient in managing a bug bounty program

• Practical experience with SAST, DAST, and SCA tools

• Competence in using GitHub, along with managing relevant GitHub Actions and GitHub Advanced Security features

• Background in code review and security analysis of desktop applications

• Advanced expertise in securing Windows desktop applications

• Software development capabilities in C, C++, C#, or Java

• Experience in securing cloud services, desktop, and mobile applications

• Exceptional written and verbal communication skills

• Ability to quickly adapt in a growing organization and collaboratively solve problems across development teams

• Openness to learn new security technologies as business requirements evolve

• Capability to work independently in high-risk environments with minimal supervision

• Red teaming experience (preferred)

• CISSP, CEH, or GIAC certification (preferred)

• Reverse engineering skills (preferred)

• Practical experience in AWS and managing infrastructure using Terraform (preferred)

• Advanced understanding of macOS, iOS, and Android security (preferred)

• Comprehensive knowledge of digital forensics methodology (preferred)

• Strong foundation in security architecture, system administration, and networking (preferred)

🏝️ Benefits

• Comprehensive medical, dental, and vision insurance coverage

• Employee Referral Bonus Program

• Wellness programs

• Comprehensive Time Off policy

• An opportunity to do something great for yourself and the world!