Security Engineer

📋 Description

• Plan and help execute pentests on web apps, APIs, and cloud infra.
• Embed security across the SDLC: threat modeling and remediation with teams.
• Own AWS security posture; collaborate with Wiz for CSPM and risk reduction.
• Champion security in CI/CD: IaC scanning, SAST, secure deployments.
• Translate compliance requirements into concrete controls and onboarding.
• Conduct vendor security risk assessments; advise on AI/ML security risks.

🎯 Requirements

• 3–7 years hands-on experience in app security or cloud security.
• Proven pentest experience on web apps, APIs, or cloud; OWASP Top 10.
• Strong AWS security knowledge: IAM, VPC, cloud-native design.
• Familiarity with SAST/DAST and DevSecOps integration.
• Excellent communication; explain risks clearly to engineers and non-tech.
• Growth mindset; comfortable working across domains.

🎁 Benefits

• Flat organization where ideas matter and impact is tangible.
• Real breadth and ownership across a cloud-native security stack.
• Clear growth path; role can evolve as you grow.
• Flexibility to work from home with weekly office time.
• Competitive salary and benefits.
• Unlimited vacation policy.