Security Engineer

GoDaddy’s Product Security team is looking for a Security Engineer who is passionate about helping build secure products and services used by millions of customers worldwide. In this role, you will work closely with engineering and platform teams to identify security risks, improve security practices, and help embed security throughout the software development lifecycle.  

You will have the opportunity to learn from experienced security professionals while contributing to initiatives that improve the security and resilience of our products, platforms, and cloud environments. The ideal candidate is curious, hands-on, eager to learn, takes ownership of their work, and excited to solve security challenges at scale! 

• →Identify, assess, and help remediate security risks across applications, infrastructure, cloud environments, and AI-enabled services 
• →Partner with engineering and platform teams to design, implement, and improve security controls throughout the software development lifecycle 
• →Conduct security reviews, threat modelling, and risk assessments to help build secure, resilient, and scalable systems 
• →Develop and enhance automation, tooling, and processes that strengthen security coverage, improve detection and response capabilities, and increase operational efficiency 
• →Investigate security findings, stay informed on emerging threats and technologies, and contribute to a culture of security awareness and continuous learning 

• 2+ years of experience in Information Security, Security Engineering, Application Security, or a related technical field
• Understanding of web, API, cloud, and network security fundamentals, including common application security risks and secure development practices 
• Experience or exposure to security testing, vulnerability management, code review, risk assessment, or penetration testing activities 
• Familiarity with security tools such as SAST, DAST, vulnerability scanners, dependency scanning tools, or security monitoring platforms
• Basic scripting or programming skills (such as Python, Go, or Java), along with a curiosity for learning new technologies, evolving threats, and emerging security concepts 

• Familiarity with threat modeling methodologies and risk assessment concepts 
• Experience working with AWS, Azure, or GCP cloud platforms 
• Basic understanding of AI/LLM application security concepts
• Knowledge of CI/CD pipelines, DevOps practices, or Infrastructure as Code
• Participation in Bug Bounty programs, Capture The Flag (CTF) competitions, or open-source security projects

We encourage you to apply even if your experience or skillset doesn’t align perfectly with every requirement. We value a wide range of backgrounds and transferable skills, and we are excited to support learning and growth