Security Engineer
D
DISCOMusic technology SaaS
This is a remote position open to applicants who live and work in Australia., Comfort working autonomously in a remote, cross-timezone environmentFull-TimeSenior
Salary not disclosed
Apply NowOpens the employer's application page
Job Details
- Experience
- 7+ years in engineering and 5+ years of hands-on security experience in a product security, application security, or security engineering role
- Required Skills
- PythonDjangoReact
Requirements
- Bring 7+ years of engineering experience and 5+ years of hands-on security experience in product security, application security, or security engineering.
- Have experience with threat hunting, threat intelligence, or red-team activities.
- Have strong Python/Django application security knowledge, including identifying and fixing web vulnerabilities in this stack.
- Have AWS cloud security experience covering IAM, network controls, and secure architecture patterns.
- Have practical incident response experience, including on-call experience and leading an incident.
- Have working knowledge of SOC 2 or a comparable compliance framework applied to engineering practice.
- Be able to communicate risk clearly to technical and non-technical audiences.
- Be comfortable working autonomously in a remote, cross-timezone environment.
- Bonus: experience building a security program at a scaling startup.
- Bonus: familiarity with the music industry or B2B SaaS, including audio technologies such as HLS.
- Bonus: OSCP, CISSP, AWS Security Specialty, or similar certification.
Responsibilities
- Lead security engineering for the Python/Django/React application, including code reviews, threat modelling, and security design reviews.
- Own static analysis, dependency scanning, secret scanning in CI, and triage of findings.
- Coordinate penetration testing and red-team testing, and drive remediation of findings.
- Partner with engineers to set secure coding standards and provide practical guidance.
- Secure staff identity and access, including SSO/MFA enforcement, onboarding and offboarding, access reviews, and auditable platform access.
- Collaborate with the Platform team to secure AWS, including IAM, network architecture, secrets management, and compute and data layers.
- Define and automate infrastructure security baselines, including container security and CI/CD pipeline integrity.
- Build and maintain detection capabilities, and manage incident response from triage through post-incident review.
- Contribute to SOC 2 compliance, vendor and customer security assessments, risk communication, and security documentation.
- Define the security roadmap, represent security in architecture decisions, mentor staff, report on security posture, and advise on internal IT and physical security initiatives.
View Full Description & ApplyYou'll be redirected to the employer's site
