Senior Application Security Engineer
New
S
SardineFintech security
Remote - United StatesFull-TimeSenior
Salary$135K - $180K; $135K – $180K • Offers Equity
Apply NowOpens the employer's application page
Job Details
- Required Skills
- Node.jsPythonJavaRubyGo
Requirements
- Experience running vulnerability management end to end and automating it with code against scanner, ticketing, and source-control APIs.
- An engineering background, including shipping and maintaining software and reviewing unfamiliar code.
- Code-auditing experience in at least one of Go, Python, Node.js, Ruby, or Java, and willingness to work in the others.
- Practical command of the OWASP Top 10, with depth in broken access control and business logic flaws.
- Experience with SAST, DAST, and SCA in CI/CD, tuned so engineers trust the output.
- Cloud fundamentals on GCP or AWS.
- Experience with Docker and Kubernetes.
- Ability to distinguish real findings from theoretical ones and support judgments with evidence.
Responsibilities
- Triage, validate, route, and drive remediation of vulnerability findings from SAST, DAST, SCA, code review, pentests, and bug bounty.
- Build automation for vulnerability management using scanner, ticketing, and source-control APIs.
- Set scope for external pentests and bug bounty programs, direct testers, assess severity, and close the loop.
- Identify recurring vulnerability patterns and address their root causes.
- Set secure patterns and defaults, and write custom static analysis rules for internal anti-patterns.
- Review authorization, service identity, secrets handling, and gateway enforcement controls; drive gaps to closure with owning teams.
- Work with engineers on fixes and review high-exposure services for authorization and business logic flaws.
- Threat model new and high-exposure designs.
- Support security enablement across engineering, including a security champions program.
View Full Description & ApplyYou'll be redirected to the employer's site
