Security Engineer

About the Role
You’ll join the Application Security team within Engineering. The main focus is securing Windows desktop applications, with some work on macOS, iOS and Android.

Responsibilities

• Integrate SAST, DAST and SCA tools into CI/CD pipelines to automate security checks.
• Coordinate external code reviews and penetration tests, triage findings, assess severity and recommend fixes.
• Support product teams with threat modeling and design reviews.
• Run the bug bounty program, working with external researchers and the platform vendor.
• Validate reported vulnerabilities and verify that fixes work.
• Promote secure development practices across the organization.

Requirements

• Experience running a bug bounty program and working with SAST, DAST and SCA tools.
• Solid knowledge of GitHub, GitHub Actions and GitHub Advanced Security.
• Deep experience securing Windows desktop applications, including code review and security analysis.
• Development skills in C, C++, C# or Java.
• Experience securing cloud, desktop and mobile applications.
• Strong written and verbal communication skills in English.
• Adaptable, collaborative, and able to work independently with little supervision.

Nice to Have

• Red teaming experience.
• CISSP, CEH or GIAC (Reverse Engineering) certification.
• AWS and Terraform.
• Advanced knowledge of macOS, iOS and Android security.
• Digital forensics.
• Background in security architecture, system administration and networking.