Description

You will own the security posture of our applications through proactive design review, testing, and process enhancement.

This role is on-site.

Responsibilities

• Engage in design discussions and data handling reviews to embed security early in the development lifecycle.
• Execute targeted penetration tests on critical features and recommend mitigation strategies.
• Develop and maintain AppSec processes and CI/CD scanning tools for vulnerability identification.
• Collaborate with ML, search, product, infrastructure, data, and frontend teams to build secure solutions.
• Enable development teams to make informed, security-aware technical decisions.

Required Skills

• 3+ years of experience in Application Security, identifying risks and implementing security features.
• 3+ years of dedicated experience in Penetration Testing.
• 2+ years using SAST, DAST, and dependency scanning tools (Snyk, GitHub Dependabot, Burp Suite).
• 2+ years coding in modern languages such as Python or Golang.
• Hands-on experience with cloud-native security practices across AWS, GCP, and/or Azure.
• In-depth knowledge of application security, authentication, authorization, and encryption.
• BS+ in computer science or a related field, or equivalent relevant experience.

Key Skills

Education

Any Graduate