- Embed security into every stage of the SDLC, from design to deployment.
- Lead secure code reviews across TypeScript/Node.js services and React, Next.js, and React Native stacks.
- Partner with backend, frontend, SRE, and platform teams to identify and mitigate risks in real-time systems, APIs, and payment flows.
- Drive threat modeling for new features and systems, including transactions, integrations, and shared platform services.
- Own vulnerability discovery, triage, prioritization, remediation, and reporting.
- Implement security tooling, including SAST, DAST, SCA, and secrets scanning, in CI/CD pipelines.
- Establish secure architecture patterns for high-scale, real-time systems and transaction processing.
- Define and execute the application security strategy and roadmap.
- Support and lead security incident response, including root cause analysis and long-term remediation.
Node.jsReact NativeTypeScript+2 more