Description

Key Responsibilities

Validate AI‑generated vulnerability findings (e.g., from Anthropic’s Mythos) and assess exploitability, severity, and business impact.

Trace vulnerabilities to their technical root cause at the code level.

Collaborate with development teams to design and implement secure remediation strategies.

Conduct secure code reviews, threat modeling, and vulnerability assessments.

Define and enforce secure SDLC practices across product teams.

Provide guidance on API security, OWASP Top 10 risks, and secure design principles.

Partner with product owners and engineering teams to ensure vulnerabilities are remediated effectively and deployed safely.

Document findings, remediation steps, and best practices to strengthen organizational security posture.

Required Skills

Strong background in Application Security / Product Security.

Hands‑on experience with OWASP Top 10, SAST, vulnerability assessment, secure SDLC, threat modeling, code review, API security.

Ability to validate findings, assess severity, and trace vulnerabilities to root cause.

Experience working directly with developers to remediate vulnerabilities.

Strong communication skills to bridge security and engineering teams.

Ideal Profile

A software engineer turned AppSec professional — someone who understands both the security problem and how developers actually fix it.

Proven ability to work across multiple product teams, enabling secure development practices.

Experience with modern CI/CD pipelines and integrating security tooling into developer workflows

Key Skills

Education

Not specified