Security Engineer (Enterprise)
Core
Application Security Engineer responsible for safeguarding products and user data by integrating security into the development lifecycle, identifying vulnerabilities in web and mobile platforms, and driving a security-first mindset.
Role type
Application Security Engineer
Builds
Secure web and mobile applications (Android, iOS) within a microservice architecture for a global media & entertainment company.
Domain
Media & Entertainment / Application Security
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
Security testing of web, Android, and iOS applications, Threat modeling, Secure SDLC integration, Manual and automated security assessments, Knowledge of payment gateway integration and authentication flows, Proficiency in Python, Java, PHP, C, C++, SQL, Javascript, Ruby, NodeJS, Go
Preferred skills
Contributions to the security community, Automation of security tasks
Technologies
Python, Java, PHP, C, C++, SQL, Javascript, Ruby, NodeJS, Go, OWASP Top 10, Microservice architecture
Responsibilities
Perform security testing of web, Android, and iOS applications to identify and mitigate vulnerabilities, Collaborate with product and engineering teams to integrate secure SDLC practices, Develop creative attack scenarios to uncover potential threats, Define the threat landscape from product ideation to implementation, Proactively identify platform-wide vulnerabilities and provide remediation guidance, Champion a security-first culture by influencing engineering practices and decision-making
Seniority
Mid-level, hands-on IC
