Description

You will own the engineering and operational aspects of our application security posture.

This role is on-site.

Responsibilities

• Engage in design discussions and data handling reviews to embed security early in the development lifecycle.
• Execute targeted penetration tests on critical features and recommend risk mitigation strategies.
• Develop and maintain AppSec processes and CI/CD scanning tools for vulnerability identification.
• Partner with ML, search, product, infrastructure, data, and frontend teams to design secure solutions.
• Enable development teams to make informed security decisions.

Required Skills

• 3+ years experience in Application Security, focusing on risk identification and mitigation.
• 3+ years experience conducting Penetration Testing.
• 2+ years experience with SAST, DAST, dependency scanning, and vulnerability management tools (Snyk, GitHub Dependabot, Burp Suite).
• 2+ years experience with modern programming languages like Python or Golang.
• Hands-on experience with cloud-native security practices across AWS, GCP, and/or Azure.
• In-depth knowledge of application security, network security, authentication, authorization, and encryption.
• Familiarity with AI/LLM security and secure coding practices.
• BS+ in computer science or equivalent relevant experience.

Preferred Skills

• Experience with Snyk and GitHub Dependabot.
• Experience with Burp Suite.

Key Skills

Education

Any Graduate