Lead threat modeling and secure design reviews for new features, services, and architectural changes to discover and mitigate security findings early (shift left).
Design and implement security-sensitive application functionality such as authentication, authorization, roles and permissions, and customer data handling.
Build and maintain security libraries, tooling, and AI-powered agent suites that enable engineering teams to ship secure code by default and run frequent in-house security tests.
Own our security testing lifecycle: integrate SAST, DAST, and SCA into CI/CD, contract and operate external penetration tests, and lead remediation of findings end-to-end.
Perform secure code reviews and partner with developers on fixes, not just filing tickets, but pairing on solutions.
Harden cloud infrastructure and runtime environments, including container security, network policies, secrets management, and least-privilege access controls.
Evaluate security risks of portfolio companies.
What we look for
BSc. or MSc. in Computer Science or comparable degree.
At least 5 years of experience in software engineering and infrastructure with focus on security.
Exceptional problem-solving abilities, effective communication, and teamwork skills.
You should be strong in Backend & Application Security Engineering and at least one of the remaining three skill sets: