Senior Security Engineer - AppSec
New
V
vivenuEvent ticketing technology
Remote GermanyFull-TimeSenior
Salary not disclosed
Apply NowOpens the employer's application page
Job Details
- Experience
- 5+ years of dedicated Security Engineering experience
- Required Skills
- GCPKubernetesTerraform
Requirements
- Have 5+ years of dedicated Security Engineering experience.
- Bring experience in a high-growth SaaS, e-commerce, or fintech environment ideally.
- Understand the business logic of complex SaaS applications and how to uncover and verify attack vectors.
- Have deep knowledge of web and API attack vectors and scalable security best practices.
- Know how to run workloads securely in cloud environments, including Kubernetes and AWS, GCP, or Azure.
- Demonstrate ownership of driving security initiatives from conception to completion.
- Be proficient in at least one programming language for scripting and security tool development.
- Hold a bachelor's or master's degree in Computer Science, Cybersecurity, IT, or a related technical field, or have equivalent practical experience.
- Preferred: experience with PCI DSS script security.
- Preferred: Red/Purple Team operations and advanced penetration testing.
- Preferred: hands-on Terraform experience for infrastructure-as-code security and security testing.
- Preferred: familiarity with GCP, Go, and TypeScript.
Responsibilities
- Build, scale, and architect the AppSec program.
- Partner with engineering teams to promote security-by-design.
- Coordinate threat modeling and execute security tests across the product and infrastructure.
- Drive risk-based vulnerability triage and remediation, including use of EPSS.
- Use AI technologies to accelerate security testing at scale.
- Design, implement, and automate SAST, DAST, and secret-scanning checks and guardrails in CI/CD pipelines.
- Review code and configurations and advocate for secure coding practices.
View Full Description & ApplyYou'll be redirected to the employer's site