Software Engineer 3, Security
Core
Drive the team's evolution from DevOps to DevSecOps by triaging vulnerabilities, analyzing codebases, and integrating security checks into CI/CD pipelines.
Role type
Senior IC security engineer (DevSecOps)
Builds
Secure code and infrastructure for CJ's performance marketing platform
Domain
Performance marketing / Cloud security
Required skills
Application security analysis, CI/CD integration, cloud infrastructure (AWS/Kubernetes), code remediation, vulnerability management, threat reasoning
Preferred skills
Automated security scanning, threat modeling, secure-by-design review, AI security assessment
Technologies
Veracode, Wiz, GitLab CI/CD, Terraform, Kubernetes, AWS, Go, Java, Python
Responsibilities
Triage and respond to vulnerabilities from tools like Wiz and Veracode; Analyze infrastructure to assess real risk; Write maintainable code to fix vulnerabilities; Integrate SAST/DAST into CI/CD pipelines; Coach engineering teams on security standards
Seniority
Senior, hands-on IC
