Security Engineer

Perform Application Security Reviews - Conduct code reviews, run SAST/DAST and dependency scanning tools, and work with engineering to resolve findings.

Participate in Threat Modeling - Contribute to threat modeling sessions for new features and architecture changes, helping identify risks early in the design process.

Help Harden Cloud and Container Infrastructure - Work on GCP, Kubernetes, and IAM configurations to strengthen the security of our cloud and container environments.

Participate in Pen Test Remediation - Help triage penetration test findings and work with engineering teams to implement fixes, coordinating closely with the security program manager.

Partner with Engineering on Secure Design - Review architectures, advise on secure implementation patterns, and help teams make informed security decisions.

Identify and Track Security Findings - Document findings, assess severity, and track them through the remediation lifecycle to resolution.

Support Incident Response - Help investigate and document security events, contribute to root-cause analysis, and support containment efforts.

Write Async Security Guidance - Produce advisories, best-practice documentation, and practical guidance that helps engineering teams build securely across time zones.

Support Product Security - Work with partners on the security posture of customer-facing services, contributing to reviews and assessments as needed.

Threat modeling experience;

Hands-on Kubernetes or container security experience;

Infrastructure security background - Linux, networking, vSphere/ESX;

Familiarity with NIST CSF, PCI, SOC 2, or ISO 27001 from a technical perspective;

Detection engineering or incident response experience;

Experience building security automation or internal tooling;

Relevant certifications (OSCP, GWAPT, CKS, or similar hands-on certs).