Senior Security Engineer
Skills
Complex SystemsISO 27001ISO StandardsProject Portfolio ManagementRoot Cause AnalysisSCASafeguard
What the job involves
The main requirements, responsibilities and hiring steps.
Requirements
- 5+ years of security engineering experience with a strong AppSec focus
- Hands-on experience with threat modeling frameworks such as STRIDE or PASTA
- Proficiency with AppSec tools such as Semgrep Snyk Burp Suite or OWASP ZAP
- Deep understanding of web application vulnerabilities and API security
- Ability to read and reason about code in at least two languages
- Experience with software supply chain security including SBOM generation and analysis
- Strong written and verbal communication skills
Nice to have
- cloud-native experience
- container security
- open-source contributions
- relevant certifications
Day to day
- Lead application security efforts across web applications APIs mobile software and shipped product deliverables.
- Partner with engineering product and platform teams to embed security into the full software development lifecycle and prioritize real risk.
- Perform threat modeling architecture reviews secure code reviews and vulnerability triage while improving standards tooling and remediation workflows.