Senior Software Engineer, Security Platform

This is a fully remote position, open to applicants in India.

📋 Description

• Design, construct, and manage security engineering services primarily utilizing Golang and Python within AWS and Kubernetes environments.

• Take ownership of the NATS event-driven platform, which encompasses contracts, consumers, delivery assurances, and observability.

• Integrate scanners, the finding system of record, ticketing systems, and metrics.

• Oversee the delivery of SAST, SCA, secret detection, container, and IaC security gates.

• Develop agentic security workflows, including CI review agents, automated finding triage and verification, and remediation assistants.

• Create automation for triage-to-remediation processes, featuring reproduction context, guidance for fixes, and routing.

• Engage in threat modeling and secure design assessments.

• Participate in the on-call rotation for the services you manage.

• Report directly to the Director of Information Security and collaborate with detection and response as well as network and zero trust engineers.

⛳️ Requirements

• Over 6 years of professional software engineering experience, with a strong focus on backend development.

• Recently deployed significant changes to a production application within the last 30 days.

• Strong expertise in Golang and a working knowledge of Python.

• Practical experience in building and operating event-driven or message-based systems such as NATS or Kafka.

• Hands-on experience in developing and maintaining CI/CD pipeline tools.

• Comprehensive knowledge of web application security principles, including the OWASP Top 10.

• Experience with SAST, SCA, and secret-scanning tools like Semgrep, CodeQL, Snyk, Trivy, Grype, and gitleaks.

• Proven current utilization of AI tools and experience in creating effective agentic workflows.

• Familiarity with AWS and Kubernetes platforms.

• Preferred: experience in fintech, payments, BNPL, or consumer lending sectors.

• Preferred: understanding of PCI DSS and SOC 2 compliance.

• Preferred: knowledge of software supply-chain integrity, including SBOM pipelines, dependency management, artifact signing, and provenance.

• Preferred: familiarity with policy-as-code and admission control frameworks such as OPA, Kyverno, and conftest.

• Preferred: exposure to bug bounty programs or external vulnerability report management.

• Preferred: experience in system-level threat modeling.

🏝️ Benefits

• Fully remote working arrangements.

• Flexibility to work from any location.

• Access to AI-assisted engineering tools and workflows.

• An open-source-focused technology landscape.