Senior Engineer - Application and Platform Security
New
J
Juniper SquareApplication security
Location: India; Workplace: RemoteFull-TimeSenior
Salary not disclosed
Apply NowOpens the employer's application page
Job Details
- Experience
- 5+ years in application or product security, or in software engineering with a strong security focus.
- Required Skills
- PythonJavascriptTypeScript
Requirements
- Have 5+ years in application or product security, or in software engineering with a strong security focus.
- Bring deep experience finding vulnerabilities through manual code review, including authorization and business logic flaws.
- Have strong Python skills and working proficiency in JavaScript/TypeScript to review front-end code for client-side issues.
- Write production-quality code.
- Know OAuth 2.0/OIDC, SAML, MFA, session management, and access control models in depth, with hands-on experience implementing them securely.
- Have experience leading threat-modeling sessions with engineering teams and translating findings into concrete requirements.
- Have experience running and tuning SAST, SCA, and DAST, including writing custom rules.
- Have working knowledge of cloud, container, and CI/CD security.
- Have a working understanding of LLM application risks.
- Write clearly and have a track record of influencing engineering teams without becoming a bottleneck.
- Nice to have an offensive web security background, such as bug bounty, web application CVEs, or CTFs.
- Nice to have experience building developer-facing security tooling or libraries, or building or running a security champions program.
Responsibilities
- Lead security design reviews and threat models for product features, focusing on authentication, authorization, data isolation, and high-risk financial workflows.
- Manually review and security-test web applications and APIs, then drive fixes through verification.
- Design secure-by-default libraries, framework-level controls, and custom static analysis rules.
- Triage application findings from automated and manual testing and external assessments, group them by root cause, and provide remediation guidance.
- Threat-model and test AI-powered product features for prompt injection, unsafe tool use, data leakage, and excessive agency.
- Share design review and triage responsibilities across the team.
- Support external penetration testing from scoping through retest.
- Partner on build pipeline and supply-chain security, especially application-code dependency risk.
- Participate in incident response for application security events.
- Build security automation and agents to reduce review and triage time.
View Full Description & ApplyYou'll be redirected to the employer's site
