Sr. Application Security Engineer
Core
Own application security for React Native apps, Ruby backend services, and AWS infrastructure, integrating security into the CI/CD pipeline and working with engineering squads.
Role type
Senior Application Security Engineer
Builds
Secure software supply chain, security tooling in CI/CD, and secure app architectures.
Domain
Kids entertainment / Mobile & Web Security
Required skills
Application security, Mobile application security (React Native), CI/CD security integration, Code review, Web and API security, Authentication and authorization, Threat modeling, Vulnerability management, Security incident response, Privacy regulation compliance (COPPA, GDPR)
Preferred skills
Native iOS/Android security, AWS security services, Software supply chain security (SBOM, dependency pinning), Security certifications (OSCP, OSWE, GWAPT)
Technologies
React Native, Ruby, JavaScript, TypeScript, AWS, OWASP MASVS/ASVS
Responsibilities
Run threat modeling and design reviews with engineering squads, Build and maintain security tooling in CI/CD (SAST, dependency scanning), Find, triage and fix vulnerabilities in code, Coordinate penetration tests, Work with Legal and Privacy on kids privacy requirements, Raise security baseline through guidelines and training, Take part in security incident response
Seniority
Senior, hands-on IC
