Related skills
aws gcp penetration testing threat modeling static code analysis📋 Description
- Collaborate with product/dev to identify security risks.
- Identify vulnerabilities in product development.
- Deploy and triage outputs from SAST/DAST and other tools.
- Deploy tooling into SDLC and pipelines; enforce SLAs.
- Lead security reviews and threat modeling; educate engineering teams.
- Engage third-party pentesting and optimize the security review process.
🎯 Requirements
- 2+ years experience as a security researcher/engineer.
- Ability to write code to test vulnerabilities in Weave systems.
- Experience with security assessments, pentests, and vulnerability scans.
- Knowledge of threat modeling techniques.
- Knowledge of static/dynamic code analysis and dependency scanning tools.
- Strong understanding of AWS and GCP core services.
🎁 Benefits
- Deep understanding of application security practices and tooling.
- Demonstrable capability to execute security responsibilities.
- Desire to work at Weave and interest in our products.
- Track record of securing SaaS products.
- Ability to remove ambiguity and distill what matters.
- Sense of humor and ability to have fun while working hard.
Meet JobCopilot: Your Personal AI Job Hunter
Automatically Apply to Engineering Jobs. Just set your
preferences and Job Copilot will do the rest — finding, filtering, and applying while you focus on what matters.
Help us maintain the quality of jobs posted on Empllo!
Is this position not a remote job?
Let us know!