Senior Security Automation Engineer with Python

View full description

Requirements:

• 5+ years of full-time development experience, ideally across the stack (Web Frontend, JS, Web APIs, Python, etc.).
• Experience integrating security into build, deployment, and test automation; SDLC orchestration; environment management; monitoring; and production.
• Understanding of web security paradigms, including the OWASP project.
• Hands-on experience and proficiency in API test automation and standardization is a great plus.
• Experience in bug bounty programs and your own public CVEs/research related to web applications is a great plus.
• Exposure to modern web browser security design, web architecture, network protocols, and web automation frameworks.
• Experience with red-teaming, such as developing botnets and white-hat hacking, is a plus.
• A great collaborator and communicator who stays curious.
• Good verbal and written communication skills in English.

Responsibilities:

• Develop and maintain SOC security automation capabilities in partnership with our AI/ML research team and security specialists.
• Conduct in-depth research on software tools or services that aid threat actors in bypassing our bot detection solutions.
• Interact with external security researchers in our bug bounty program.
• Own components within the vulnerability management program for our software stack.
• Maintain an up-to-date knowledge base of threat intelligence, vulnerabilities, attack vectors, bot management, and adversarial research.
• Collaborate with our security analysts on demanding security investigations.
• Manage technical aspects of integration (configuration, debugging, documentation, testing, go-live) for our internal security tooling.
• Identify new standards and technologies that could impact the accuracy of our security products.