← Back to jobs

StaffXpert LLC Logo
Security Engineer

StaffXpert LLC

 

Sunnyvale, CA, USA

Posted On: 1 day ago
Experience: 10+ years
Availability: Onsite
Openings: 1
Category: Security Engineer
Tenure: No Preference/Any
Related Jobs

No related jobs found

Description

This role will work closely with product engineering teams to identify, validate, and remediate security vulnerabilities while supporting automated security scanning and remediation initiatives.

Key Responsibilities

Perform threat modeling, vulnerability triage, and exploitability validation.

Analyze trust boundaries, attack surfaces, and data flows using methodologies such as STRIDE and PASTA.

Reproduce vulnerabilities and develop proof-of-concepts (PoCs) and test harnesses.

Conduct source-code reviews and debug security-related issues.

Validate automated and AI-generated security patches through code-diff reviews and regression testing.

Partner with product engineering teams to drive vulnerabilities through remediation and verified closure.

Apply secure coding practices, including input validation, boundary checking, and safe memory access.

Required Qualifications

Strong hands-on experience in Application Security or Product Security Engineering.

Strong understanding of CWE, CVE, OWASP Top 10, vulnerability severity, and remediation SLAs.

Experience with threat modeling methodologies and vulnerability assessment.

Strong source-code review and debugging skills.

Proficiency in at least two programming languages, including C++, Go, Java, or Python.

Experience reproducing vulnerabilities and developing PoCs or security test harnesses.

Solid knowledge of secure coding principles and software security best practices.

Experience reviewing automated security fixes and performing regression testing.

Strong collaboration skills with the ability to work directly with engineering teams and drive security issues to resolution.

Preferred Qualifications

Experience with SAST, DAST, and automated security scanning tools.

Experience with fuzz testing and differential testing.

Knowledge of distributed systems and microservices architectures.

Familiarity with AI-assisted code generation or automated security remediation tools.

Experience with prompt tuning or debugging automated coding agents.

Education

Any Graduate

Related Jobs

No related jobs found

← Back to jobs