Description

Secure production and staged applications through penetration testing, threat modeling, and code reviews.

Responsibilities

• Perform penetration testing on applications using tools like Burp Suite or Zap.
• Conduct threat modeling and data flow analysis to advise developers and product managers on necessary defenses.
• Write code in Python, Bash, or Go to build internal automated security tools.
• Triage bug bounty reports, define risks, and propose technical fixes.
• Configure automated security tooling like static and dynamic code analysis within the SDLC.

Required Skills

• 4+ total years of experience in Engineering, Application Security, or a similar technical field.
• 2+ years of experience in software development, DevOps, or Site Reliability Engineering with hands-on coding.
• Strong programming skills in at least one of these languages: Python, Go, PHP, Javascript, or Ruby.
• Expertise in application penetration testing.
• Detailed knowledge of cloud environments, specifically AWS or GCP.
• Proficiency with shell scripting.
• Experience with SDLC components including Git, Jira, and Jenkins.
• Strong knowledge of modern web, mobile, and network security.

Preferred Skills

• Prior direct experience in Application Security.

Key Skills

Education

ANY GRADUATE