Senior Security Engineer - AppSec (d/f/m)

Role overview A senior, high-impact Application Security role tasked with building and scaling a modern AppSec program from the ground up within a fast-growing event-ticketing platform. The engineer will drive the full security lifecycle, including red teaming, threat modeling, vulnerability management, and fostering a shift-left culture across global engineering teams. The position targets candidates who want to shape security architecture rather than maintain an existing program.

Responsibilities - Drive the application security lifecycle end-to-end, from offensive testing and threat modeling to risk-based vulnerability management. - Champion a shift-left culture by partnering with engineering teams on secure design and remediation. - Secure a large TypeScript monolith, supporting Go services, and the underlying APIs powering the customer-facing platform. - Harden GitHub-based CI/CD pipelines and integrate security tooling into developer workflows. - Protect a multi-tenant, multi-region cloud environment spanning Kubernetes, Google Cloud, and external database services. - Contribute to a satellite-style Kubernetes architecture using private compute nodes, VPC peering, and GitOps deployments.

Requirements - At least five years of dedicated security engineering experience in high-growth SaaS, e-commerce, or fintech environments. - Deep understanding of web and API attack vectors plus secure cloud workload patterns on Kubernetes and major cloud providers. - Proven ability to autonomously drive security initiatives from conception through completion. - Proficiency in at least one programming language for scripting and security tooling. - Bachelor's or Master's degree in computer science, cybersecurity, IT, or equivalent practical experience.

Nice to have - Familiarity with PCI DSS script security requirements. - Background in red or purple team operations and advanced penetration testing. - Hands-on experience with Terraform for infrastructure-as-code security. - Working knowledge of GCP, Golang, and TypeScript.

Benefits and work setup - Mission-critical role supporting global entertainment and sports brands at scale. - Profitable, venture-backed environment with continuous investment in people and product. - Globally distributed, merit-driven team culture across multiple offices.