Sr. Software Engineer
Core
Perform security testing (SAST/DAST), API security reviews, vulnerability triage, and incident response for applications and infrastructure.
Role type
Junior Application Security Engineer (AppSec)
Builds
Secure codebases, CI/CD security guardrails, and incident response playbooks
Domain
Cybersecurity / Application Security
Required skills
SAST/DAST testing, API security (REST/GraphQL), OWASP Top 10, OAuth2/JWT, mobile app security (MASVS), reverse engineering, secure coding, networking fundamentals, scripting (Python/Bash), SIEM/EDR monitoring
Preferred skills
Snyk, SonarQube, Semgrep, Trivy, Dependabot, CrowdStrike, Sentinel, WAF, AWS/GCP/Azure, MITRE ATT&CK, SOAR, Kubernetes monitoring, forensic investigation
Technologies
BurpSuite, OWASP ZAP, SIEM, EDR, WAF, Python, Bash, Java, Go, Rust, Android, iOS, Linux, Windows, TCP/IP, DNS, Kubernetes, CloudTrail, Security Command Center
Responsibilities
Conduct SAST and DAST testing, review API endpoints for auth flaws, triage and remediate vulnerabilities, integrate security tooling into CI/CD, monitor security alerts, participate in on-call rotations
Seniority
Junior (0–2 years experience or strong academic/project exposure)
