Description

You will secure web applications, APIs, and distributed systems by integrating security into design, development, and release pipelines.

This role is remote.

Responsibilities

• Review system designs and data flows to identify architectural security risks early in the lifecycle.
• Design and maintain automated pipelines for SAST, DAST, SCA, and secrets detection.
• Secure authentication and identity platforms using OAuth2, OIDC, SAML, JWT, and MFA.
• Assess cloud-native architectures and CI/CD pipelines for application-specific risks.
• Collaborate with engineering teams to remediate vulnerabilities and improve security outcomes.

Required Skills

• 6+ years of experience in application or product security roles.
• Deep experience securing web applications, APIs, WAFs, and distributed systems.
• Proficiency in Node.js, Python, JavaScript, or TypeScript.
• Solid understanding of AWS cloud-native application architectures.
• Strong grasp of authentication protocols (OAuth2, OIDC, SAML, JWT, MFA).
• Experience with REST APIs and identity platform security.
• Ability to operate in regulated environments and align with compliance requirements.

Preferred Skills

• Experience assessing or threat modeling AI-powered features, LLM integrations, prompt injection, and data leakage risks.
• Familiarity with Kubernetes, container security, and infrastructure-as-code.
• Experience with application-focused penetration testing or adversarial security testing.

Key Skills

Education

Any Gradute