Senior Software Engineer, Security Platform

This is a fully remote position, open to applicants in Serbia.

📋 Description

• Design, construct, and manage security engineering services primarily utilizing Golang and Python on AWS and Kubernetes.

• Maintain, enhance, and decommission existing security services.

• Take ownership of the NATS-based event-driven platform, which includes contracts, consumers, delivery guarantees, and observability.

• Integrate scanners, finding systems of record, tickets, and metrics.

• Manage security gates for SAST, SCA, secret detection, container scanning, and IaC scanning.

• Choose and fine-tune scanners, oversee suppression workflows, minimize false positives, and implement enforcing gates.

• Develop CI review agents, automate finding triage and verification, and create remediation helpers.

• Automate workflows from triage to remediation, including reproduction context, fix guidance, and routing.

• Engage in threat modeling and conduct secure design reviews.

• Participate in the on-call rotation for the services you own.

• Report to the Director of Information Security and work collaboratively with detection and response, as well as network and zero trust engineers.

⛳️ Requirements

• A minimum of 6 years of professional software engineering experience, with substantial backend expertise.

• Experience deploying significant updates to a production application within the last 30 days.

• Strong proficiency in Golang.

• Working knowledge of Python.

• Practical experience in building and managing event-driven or message-based systems, including contracts, idempotent consumers, replay, and back-pressure.

• Hands-on experience in developing and maintaining CI/CD pipeline tools; familiarity with GitLab CI at fleet scale is highly advantageous.

• Practical knowledge of web application security, including the OWASP Top 10 in actual code.

• Hands-on experience with SAST, SCA, and secret-scanning tools, such as Semgrep, CodeQL, Snyk, Trivy, Grype, or gitleaks.

• Demonstrated engineering experience with AI tools, including Claude Code, Codex, Cursor, or custom LLM integrations.

• Experience in creating agentic workflows that are adopted by other engineers.

• Working knowledge of AWS and Kubernetes.

• Preferred: experience in fintech, payments, BNPL, or consumer lending.

• Preferred: understanding of PCI DSS and SOC 2.

• Preferred: experience with software supply chain integrity, including SBOM pipelines, dependency governance, artifact signing, and provenance.

• Preferred: familiarity with policy-as-code and admission control technologies, such as OPA, Kyverno, or conftest.

• Preferred: exposure to bug bounty or external vulnerability report triage.

• Preferred: experience in system-level threat modeling.

🏝️ Benefits

• Fully remote work arrangement.

• Gross monthly compensation ranging from $5,000 to $9,500 USD.

• Flexibility to work from wherever you perform best.

• AI-assisted engineering tools and workflows integrated into the development process.

• Opportunity to collaborate with a global, innovative fintech and retail team.