Security Engineer II - (Product Security)
Core
Build security into web, mobile, and backend applications by testing, triaging vulnerabilities, and automating security checks in CI/CD pipelines.
Role type
mid-level IC application security engineer
Builds
secure web/mobile apps and CI/CD pipelines for a global delivery platform
Domain
cybersecurity, application security, cloud security
Required skills
web and mobile application security principles, OWASP Top 10, code reading (Java/Python/Go/TypeScript), vulnerability reproduction (XSS/SQLi/IDOR), CI/CD integration (SAST/SCA), cloud/container concepts (AWS/GCP/Azure/Docker/Kubernetes), AI-driven security tools
Preferred skills
Bug Bounty program experience, CTF competitions, OAuth 2.0/OIDC/SAML standards, Security+/eJPT/GWAPT certifications
Technologies
Burp Suite, OWASP ZAP, GitHub Actions, GitLab CI, AWS, GCP, Azure, Docker, Kubernetes, LLM coding assistants
Responsibilities
Run security assessments and code reviews to fix application-layer vulnerabilities; Triage and track Bug Bounty and Vulnerability Disclosure Program reports; Implement and maintain automated security testing in CI/CD pipelines; Partner on threat modeling and architecture reviews for new features; Support AI-driven tools for vulnerability triage and code analysis; Guide software engineers on secure coding standards and best practices
Seniority
Mid-level, hands-on IC
