If you're looking for a place to grow, make an impact, and work with people who care, we'd love to meet you!
ABOUT THE ROLE
We are looking for a Python Application Security Engineer to automate security controls and improve vulnerability management across CI/CD pipelines.
MUST HAVES
- 3-5 years of commercial experience in software engineering.
- Solid coding proficiency in Python for automation and scripting.
- Working knowledge of modern CI/CD orchestration tools and practical experience interacting with vulnerability scoring frameworks.
- AppSec tooling expertise or security architecture.
- Ability to operate with minimal supervision on day-to-day execution, reliably completing complex scripting and integration tasks.
NICE TO HAVES
- Experience in DevSecOps/AppSec.
- Ability to comfortably read and navigate Java source code.
- Hands-on experience with specific CNAPP or ASPM platforms (e.g., Wiz).
- Basic understanding of application threat modeling.
WHAT YOU WILL DO
- Pipeline Integration:
Write and maintain the scripts necessary to integrate security gates (SAST, DAST, SCA) seamlessly into the CI/CD pipeline.
- Security Data Triage: Continuously tune and configure existing security scanning tools to eliminate false positives and deliver high-confidence alerts.
- Baseline Automation: Assist in coding and deploying automated hardened baselines and secure coding patterns.
- Code-Level Remediation: Work directly with product development teams to provide actionable, code-level remediation guidance in Java and Python.
PERKS AND BENEFITS
- Professional growth: Mentorship, TechTalks, and personalized growth roadmaps.
- Competitive compensation: USD-based pay with education, fitness, and team activity budgets.
- Exciting projects: Modern solutions with Fortune 500 and top product companies.
- Flextime: Versátil schedule with remote and office options.