Senior Software Engineer, Security Platform

This is a fully remote position, open to applicants in Turkey.

📋 Description

• Design, develop, and manage security engineering services primarily utilizing Golang and Python on AWS and Kubernetes.

• Sustain, fortify, and decommission existing security services.

• Lead the NATS-based event-driven architecture, encompassing contracts, consumers, delivery assurances, and observability.

• Integrate scanners, systems of record for findings, ticketing, and metrics.

• Oversee security gates for SAST, SCA, secret detection, container scanning, and Infrastructure as Code (IaC) scanning.

• Fine-tune scanners, handle suppression workflows, minimize false positives, and implement enforcing security gates.

• Develop CI review agents, automated finding triage and verification tools, and remediation assistance.

• Automate the triage-to-remediation processes, which include reproduction context, fix guidance, and routing.

• Engage in threat modeling and secure design evaluations.

• Participate in the on-call rotation for managed services.

• Report to the Director of Information Security and work closely with detection and response, network, and zero trust engineers.

• Create reusable AI-assisted engineering workflows and uphold review discipline within platform code.

⛳️ Requirements

• Over 6 years of professional software engineering experience, particularly with a strong backend focus.

• Implemented significant changes to a production application within the last 30 days.

• Advanced proficiency in Golang, alongside working knowledge of Python.

• Practical experience in constructing and operating event-driven or message-oriented systems (such as NATS, Kafka, or similar), with knowledge of contracts, idempotent consumers, replay, and back-pressure.

• Direct experience in creating and maintaining CI/CD pipeline tools; strong familiarity with GitLab CI at scale is a plus.

• In-depth knowledge of web application security, particularly the OWASP Top 10 in real-world applications.

• Hands-on experience with SAST, SCA, and secret-scanning tools, including optimizing signal-to-noise ratios.

• Proven track record of AI-centered engineering experience using AI tools and developing agentic workflows utilized by other engineers.

• Familiarity with AWS and Kubernetes as deployment environments.

• Preferred: experience in fintech, payments, Buy Now Pay Later (BNPL), or consumer lending sectors.

• Preferred: knowledge of PCI DSS and SOC 2 compliance standards.

• Preferred: expertise in software supply chain integrity, encompassing SBOM pipelines, dependency management, artifact signing, and provenance.

• Preferred: understanding of policy-as-code and admission control mechanisms.

• Preferred: experience with bug bounty programs or triaging external vulnerability reports.

• Preferred: background in system-level threat modeling.

🏝️ Benefits

• Competitive salary and comprehensive benefits package.

• Flexible working hours and remote work options.

• Opportunities for professional development and continuous learning.

• Supportive and inclusive work environment.