Senior Application Security Engineer (all genders)

Requisitos

• 5+ years in AppSec (or 3+ years plus a strong software engineering/web-pentesting background), with a track record of true ownership
• Read and write production code (Python, Go, TypeScript, Ruby, etc.)
• Deep understanding of web frameworks, CI/CD, and Kubernetes
• Deep knowledge of web and API security: authentication/authorization models (OAuth2, JWT), rate limiting, tenant isolation, IDOR, and XSS
• Strong cloud security fundamentals (GCP preferred): public exposure, secrets hygiene, and WAF rules

Desejáveis

• Experience securing high-volume, multi-tenant B2B APIs
• Experience utilizing AI tooling to accelerate triage and review