Security Engineer II - (Product Security)
Core
Build security into web, mobile, and backend applications by testing, triaging vulnerabilities, and automating security checks in CI/CD pipelines.
Role type
Application Security Engineer (Product Security)
Builds
Secure web/mobile apps, CI/CD security pipelines, and threat models for new features
Domain
Cyber defense, application security, cloud governance
Required skills
Web and mobile application security principles, OWASP Top 10 knowledge, code reading (Java/Python/Go/TypeScript), vulnerability reproduction (XSS/SQLi/IDOR), CI/CD integration (SAST/DAST/SCA), cloud/container concepts (AWS/GCP/Azure/Docker/Kubernetes), AI-driven tool usage
Preferred skills
Bug Bounty program experience, CTF competition experience, OAuth 2.0/OIDC/SAML knowledge, Security+ or eJPT certification
Technologies
Burp Suite, OWASP ZAP, GitHub Actions, GitLab CI, AWS, GCP, Azure, Docker, Kubernetes, STRIDE
Responsibilities
Run security assessments and code reviews, triage and validate vulnerability reports, implement automated security testing in pipelines, conduct threat modeling sessions, guide engineers on secure coding standards
Seniority
Mid-level, hands-on IC
