Security Engineer, Product Security team
Core
Security Engineer supporting the Product Security team to ensure web, mobile, and backend applications are built securely from the ground up.
Role type
Security Engineer (Product Security)
Builds
Secure web, mobile, and backend applications for a global local delivery platform
Domain
Fintech/Logistics (Local Delivery Platform)
Required skills
Application security fundamentals (OWASP Top 10), Hands-on coding (Java, Python, Go, TypeScript), Vulnerability triage & validation (XSS, SQLi, IDOR), DevSecOps (SAST, DAST, CI/CD), Cloud & container basics (AWS/GCP/Azure, Docker, Kubernetes), AI & automation tools
Preferred skills
Bug Bounty program experience, CTF participation, Authentication/authorization standards (OAuth 2.0, OIDC, SAML), Security certifications (Security+, eJPT, GWAPT)
Technologies
Burp Suite, OWASP ZAP, GitHub Actions, GitLab CI, STRIDE, LLM coding assistants
Responsibilities
Conduct security assessments and review code to remediate application-layer vulnerabilities; Manage Bug Bounty and Vulnerability Disclosure Programs; Implement automated security testing tools in CI/CD pipelines; Facilitate threat modeling sessions and architectural reviews; Support AI-driven security automation; Track vulnerability remediation SLAs; Provide developer enablement on secure coding standards
Seniority
Mid-level, hands-on IC
