Senior Security Engineer

📋 Description

• Collaborate with dev teams to implement secure coding in the SDLC.
• Identify and remediate IaC misconfigurations, API security, and cloud-native flaws.
• Execute application security testing: vulnerability scanning, threat modeling, and pen testing support.
• Identify and mitigate software vulnerabilities; document findings and remediation steps.
• Support planning with technical input on tasks and the security backlog.
• Share knowledge to foster a high-performing engineering culture.

🎯 Requirements

• 4-6 years in application security with AWS.
• Ability to review code and provide actionable feedback.
• Experience securing cloud-native environments (containers, CI/CD, APIs).
• Knowledge of OAuth2, OIDC, and SAML.
• Hands-on with SAST, SCA, DAST, and vulnerability scanning.
• Vulnerability management and software supply chain security; OWASP Top 10, MITRE ATT&CK.

🎁 Benefits

• High-trust env with Notion, Slack, Miro, Gmail, Jira.
• Paid professional development (conferences, courses, subscriptions).
• Harrison Assessments for ongoing development.
• Flexible leave options.
• Superannuation on paid parental leave.
• Company-wide paid day off.