Security Engineer (contract)

Role overview Conduct a focused security review of a multi-tenant developer cloud, including its platform, management dashboard, and AI connector. This contract engagement centers on finding exploitable weaknesses, documenting risk clearly, and helping verify that fixes address the issues.

Responsibilities - Perform a scoped security assessment and penetration test of platform services and the dashboard. - Examine tenant isolation, API key permissions, authentication flows, payment handling, and abuse protections. - Review the AI connector and its interactions with platform capabilities. - Write findings with clear severity, evidence, and practical remediation steps. - Retest fixes and report whether identified issues have been resolved.

Requirements - Demonstrated experience testing web applications and cloud services for security issues. - Familiarity with OAuth 2.1, JWTs, multi-tenant SaaS architectures, and payment flows. - Ability to produce precise, well-structured security reports.

Nice to have - Publicly documented security research or relevant certifications.

Benefits and work setup - Paid, scoped contract engagement with a defined brief. - Remote work with a flexible schedule. - Opportunity to influence the security of a developer cloud platform.