Security Engineer, Product Security team
Core
Security Engineer working with product teams to build secure web, mobile, and backend applications using a 'Secure by Design' approach.
Role type
Security Engineer (Product Security)
Builds
Secure web, mobile, and backend applications for a global local delivery platform
Domain
Fintech/Logistics (Local Delivery Platform)
Required skills
Application security fundamentals (OWASP Top 10), Hands-on coding (Java, Python, Go, TypeScript), Vulnerability triage & validation (Burp Suite, OWASP ZAP), DevSecOps & CI/CD integration, Cloud & container basics (AWS, GCP, Azure, Docker, Kubernetes), AI & automation tools
Preferred skills
Bug Bounty program experience, CTF participation, Authentication/authorization standards (OAuth 2.0, OIDC, SAML), Security+ / eJPT / GWAPT certifications
Technologies
Burp Suite, OWASP ZAP, GitHub Actions, GitLab CI, SAST, DAST, SCA, STRIDE, AWS, GCP, Azure, Docker, Kubernetes, LLM coding assistants
Responsibilities
Conduct security assessments and review code to remediate application-layer vulnerabilities, Manage Bug Bounty and Vulnerability Disclosure Programs, Implement automated security testing tools in CI/CD pipelines, Facilitate threat modeling sessions and architectural reviews, Leverage AI-driven tools for security automation, Track vulnerability remediation SLAs, Provide secure coding guidance to developers
Seniority
Mid-level, hands-on IC
