Senior Application Security Engineer
Core
Build and automate vulnerability management pipelines to find and fix authorization flaws and business logic abuse in a multi-cloud fintech platform.
Role type
Senior Application Security Engineer (Vulnerability Management & Automation)
Builds
Automated security pipelines, custom static analysis rules, and secure platform defaults for Go, Node.js, Python, Ruby, and Java services.
Domain
Fintech / Payments / Application Security
Required skills
Vulnerability management automation, Code auditing (Go/Python/Node.js/Ruby/Java), OWASP Top 10 expertise, SAST/DAST/SCA integration, Cloud security (GCP/AWS), Kubernetes, Threat modeling
Preferred skills
Custom static analysis rules (Semgrep/CodeQL), Offensive security (Pentesting/Red teaming), Fintech audit experience (PCI DSS/SOC 2), Asynchronous distributed engineering
Technologies
Go, Node.js, Python, Ruby, Java, GCP, AWS, Docker, Kubernetes, Semgrep, CodeQL, SAST, DAST, SCA
Responsibilities
Triage and automate remediation of findings from scanners, code reviews, and bug bounties; Write custom static analysis rules to remove root causes of bug classes; Conduct threat modeling and manual code reviews of high-exposure services; Lead security enablement and the security champions program.
Seniority
Senior, hands-on IC
