Remote job
Security Engineer: Platform Security
Job details
About this role
Role overview Own and improve the security of a software platform through hands-on application security work. The role spans threat modelling, penetration testing, vulnerability handling, secure development practices, and practical security guidance for platform operators.
Responsibilities - Assess platform risks and develop threat models, including with STRIDE. - Conduct penetration testing and review code for security weaknesses. - Maintain a vulnerability disclosure process and support remediation. - Apply OWASP guidance and strengthen secure software development practices. - Write security documentation that helps operators run the platform safely.
Requirements - At least five years of application security experience. - Strong knowledge of the OWASP Top 10, STRIDE threat modelling, and secure SDLC practices. - Experience reviewing Go and TypeScript code for security issues. - Knowledge of authentication protocols such as OIDC, FIDO2, TOTP, and PKCE. - Familiarity with web security controls including WAFs, bot management, and rate limiting.
Nice to have - OSCP certification or equivalent experience. - Healthcare compliance experience, including HIPAA or HITECH. - Bug bounty experience.