Senior Security Engineer

This is a fully remote position, open to applicants anywhere in the world.

📋 Description

• Perform hands-on penetration testing and threat modeling for web applications, APIs, control planes, and cloud environments.

• Oversee comprehensive vulnerability tracking across codebases, software dependencies, container images, and cloud infrastructure.

• Address security vulnerabilities by developing patches, submitting pull requests, or collaborating with product teams for remediation.

• Conduct audits and enhance security for GCP, Kubernetes clusters, and networking configurations.

• Integrate SAST, DAST, and dependency scanners into CI/CD pipelines for automation.

• Execute security code reviews and assess third-party dependencies, open-source integrations, and supply-chain risks.

• Lead incident response efforts and implement ongoing monitoring, detection, and mitigation strategies.

⛳️ Requirements

• A minimum of 5 years of experience in Security Engineering, Product Security, DevSecOps, or a combination of Offensive and Defensive roles.

• Strong practical experience in penetration testing, demonstrating the ability to identify vulnerabilities at the application, API, and network levels.

• Proficient in reading code, understanding exploits, writing fixes, or offering clear remediation guidance to engineers.

• Extensive knowledge of cloud security (AWS or GCP) and containerized environments (Kubernetes, Docker).

• Experience with dependency and supply-chain security, CVE management, open-source licensing, and SCA tools.

• Proficient in English.

• Capable of working independently in a fully remote setting.

• Ability to adapt to a fast-paced startup environment focused on open-source solutions.

🏝️ Benefits

• Work from any location.

• Access to coworking spaces globally.

• Medical, dental, and vision insurance coverage.

• Provision of home office equipment.