🕒 14 days ago
Implements and operates cybersecurity, networking, and cloud solutions for clients, from secure architecture and tool deployment to environment maintenance, event investigation, and detection improvements.
Member of Technical Staff, Security
📅 Dec 4, 2024
Security EngineeringApplication SecuritySecurity AutomationPython
📜 Description
- Build and maintain automation and tooling for static and dynamic vulnerability detection across code and live systems.
- Conduct application security assessments, penetration tests, and code reviews; guide teams on secure development.
- Develop vulnerability management workflows and partner with engineering teams to prioritize and remediate findings.
- Establish and test security guardrails for code, cloud resources, and infrastructure.
- Monitor and respond to security events and configuration anomalies, leading investigations and containment.
- Coordinate security initiatives, track vulnerabilities through remediation, and provide audit evidence and documentation.
🛠️ Requirements
- Build and maintain security automation and tooling to detect vulnerabilities through static and dynamic analysis across code and live systems.
- Conduct application security assessments, penetration tests, and code reviews to identify high-risk security issues and provide secure development guidance.
- Develop and operate vulnerability management workflows, partnering with engineering teams to prioritize and remediate findings.
- Establish and test security guardrails for code, cloud resources, and infrastructure components throughout the Anchorage platform.
- Security or AppSec experience: You have 3+ years of hands-on experience in security engineering, application security, penetration testing, or security.
- Security tooling and automation: You have built or maintained security tools, integrations, or automation workflows using Python, Go, or similar languages.
- Vulnerability assessment: You can identify and assess security vulnerabilities in applications, APIs, and cloud infrastructure, and effectively communicate remediation strategies.
- Static and dynamic analysis: You have experience with tools like Semgrep, CodeQL, Burp Suite, or equivalent for identifying security issues in code and running systems.
- Cloud security: You understand AWS security fundamentals including IAM, VPCs, security groups, and CloudTrail/logging.
- Incident response: You can investigate security events, perform root cause analysis, and coordinate response efforts.
Full job description
Technical Skills:
Complexity and Impact of Work:
Organizational Knowledge:
Communication and Influence
You may be a fit for this role if you have:
Although not a requirement, bonus points if:
Similar jobs
Search more Cybersecurity Engineer jobs
🕒 15 days ago
Own scoped application security initiatives, identify and remediate risks with engineering teams, and embed secure patterns into system design through reviews, threat modeling, code, and incident response.
Security Engineer, Applied Research & Labs
🕒 9 days ago
Cloudflare👥 10,000+ employees🏢 Computer And Network Security🤝 B2B
🕒 9 days ago
Design and build agentic security tools, open-source reference implementations, and hands-on labs; operate lab infrastructure, lead customer workshops, and share Cloudflare’s security architecture through talks and technical writing.
🕒 13 days ago
As a Product Security Engineer, you will collaborate with product and engineering teams to embed security into Asana's software, develop secure frameworks, and address vulnerabilities.
🕒 8 days ago
Build and operate software for network security at scale, owning policy-management APIs and risk calculations while automating workflows, integrating security platforms, and supporting detection and response.