Senior Software Security Engineer

View full description

Requirements:

• 5+ years previous experience in Product Security with a strong focus on security architecture and application security testing.
• Strong development skills, and have hands-on experience working in Python or Go.
• Deep understanding of OIDC specifications, including OAuth 2.0, JWT, and related protocols.
• Solid knowledge of security principles like session management, multi-factor authentication, and secure coding practices.
• Understanding of application security principles, common vulnerabilities and are familiar with offensive security techniques and red teaming methodologies.

Responsibilities:

• Conducting security architecture reviews and threat modeling to ensure North's robust security posture.
• Contributing to the core development of security features such as OIDC/OAuth flows and session management, ensuring North's AI agents are secure and compliant.
• Writing secure code to handle OIDC tokens, user claims, and sensitive data, adhering to best practices for JWT validation and encryption.
• Advising on authentication mechanisms including user login, token management, and authorization checks to maintain data integrity.
• Pulling in new tools and influencing security decisions to enhance North's capabilities.
• Designing and executing simulated attacks against applications and systems to evaluate their resilience against real-world threats.
• Demonstrating strong soft skills to communicate security best practices to stakeholders in a clear and concise manner.