Senior Security Engineer SDLC Job at Ledger (Paris)

Senior Security Engineer - Application Security

This is an opportunity to join K's critical InfoSec team as a Senior Security En...

Location

United States , New York

Salary:

150000.00 - 185000.00 USD / Year

K Health

Expiration Date

Until further notice

Requirements

5+ years of experience in Information Security, Cloud Security, IT Security, and/or Application Security
Strong expertise in cloud technology (AWS, GCP, or Azure), modern programming languages, utilization of generative coding utilities, and the security implications of utilizing AI code development utilities
Demonstrated experience researching, establishing, and successfully rolling out enterprise-wide security policies and guidelines
Proven experience establishing a cutting-edge security posture, particularly within the regulated healthcare technology field
Excellent communication skills, capable of translating complex security risks into clear, actionable advice for technical and non-technical stakeholders
Expertise in compliance, security, and regulatory areas such as
HIPAA, PHI, AKS, SOC 2, ISO, GDPR, etc.
Flexibility in covering a rotation for critical on-call support responsibilities

Job Responsibility

Lead the development and implementation of robust application security protocols throughout the entire Software Development Lifecycle (SDLC)
Design, deploy, and continuously monitor cloud security architecture across our cloud environments, ensuring performance and resilience
Manage the security posture of K’s core IT infrastructure, internal networks, and perimeter defenses, mitigating threats before they impact operations
Ensure adherence to relevant healthcare regulatory and compliance requirements (e.g., HIPAA, GDPR, etc.) across all product lines and systems
Conduct proactive vulnerability assessments, penetration tests, and security reviews to identify and remediate potential weaknesses in our platforms
Collaborate with engineering teams to integrate security tools and practices into continuous integration/continuous deployment (CI/CD) pipelines

What we offer

Hybrid work schedule with weekly lunches and stocked fridges
Monthly social committees for company events
18 vacation days, 9 company holidays, 5 sick days, and 2 personal days
Stock options for every full-time employee
Paid parental leave
401k benefit
Commuter Benefits
Competitive health, dental, and vision insurance options

Fulltime

Senior Security Engineer, Application Security

We are hiring a Senior Application Security Engineer to join Turnkey's team and ...

Location

Salary:

Not provided

Turnkey

Expiration Date

Until further notice

Requirements

Bachelors degree in Computer Science, Engineering, or a related field
5+ years of experience in application or product security, ideally in fast-moving, high-impact or crypto-native environments
Strong understanding of web, mobile, and cryptographic security fundamentals (e.g. OWASP Top Ten, SANS/CWE Top 25)
Proficiency in programming and scripting languages (Typescript/Javascript, Go, Rust) and experience building secure systems from the code up
Hands-on experience with security testing tools and methodologies (static/dynamic analysis, pen testing, etc.)
Strong understanding of cloud, containerized, and runtime environments (AWS, GCP, Docker, Kubernetes), with the ability to embed security early in the SDLC
Excellent analytical, problem-solving, and communication skills, with a collaborative mindset for partnering across product and infrastructure teams
Curious, proactive, and passionate about building secure, reliable systems in a fast moving startup environment
A builder mentality
comfortable operating with ambiguity, tackling incomplete systems, and applying hands-on engineering experience to security challenges.

Job Responsibility

Partner with Product and Engineering at both the design and development stage to ensure that we implement new features securely, including (but not limited to): Participating in the implementation efforts
Doing security reviews
Helping with product design decisions
Auditing and surfacing vulnerabilities in our current products
Conducting threat modeling and security assessments for new features and systems, identifying risks early and shaping secure architectural decisions
Developing and improving our Automated Tooling: further enhancing our automated tooling to scale our product security capabilities and find potential code problems both before and after we deploy
Making the safe way, the easy way: work on defining and building application guardrails so that developers can build securely by default
Investigating and remediating security issues, including vulnerabilities and incidents, and drive long-term improvements to prevent recurrence
Embedding a culture of secure development across engineering, defining practices that influence how Turnkey builds, deploys, and maintains systems at scale.

What we offer

Full benefits, including medical, dental, vision, life, disability, HSA/FSA, 401(k)
Paid parental leave
Unlimited PTO
$3,000/yr learning and development budget to attend industry conferences
Multiple team offsites per year
Macbook Pro laptop
Lunch stipend (for those physically in the New York City office)

Fulltime

Senior Application Security / Product Security Engineer

We are seeking an experienced Application Security / Product Security Engineer t...

Location

India , Mumbai

Salary:

Not provided

Galaxy Office Automation Pvt. Ltd.

Expiration Date

Until further notice

Requirements

Strong understanding of Application Security and Product Security principles
Experience with secure SDLC practices
Hands-on experience performing security testing for Web applications, APIs, Mobile apps, Thick client applications
Knowledge of cloud platforms (AWS / Azure / GCP) and cloud security architecture
Experience performing security design reviews and threat modeling
Familiarity with OWASP Top 10, API Security Top 10, and common vulnerability classes
Experience using security tools such as SAST, DAST, SCA
API testing tools
Good working knowledge of Excel for tracking vulnerabilities, metrics, and reporting
Strong task management and stakeholder coordination skills

Job Responsibility

Integrate security practices into the Software Development Lifecycle (SDLC)
Perform application security design reviews for new and existing products
Conduct manual and automated security testing of Web applications, REST / GraphQL APIs, Mobile applications (Android / iOS), Thick client / desktop applications
Identify vulnerabilities such as OWASP Top 10, authentication issues, authorization flaws, and API security risks
Review cloud architecture and deployments (AWS, Azure, GCP) for security best practices
Work with development teams to prioritize and remediate vulnerabilities
Perform threat modeling and security architecture assessments
Track vulnerabilities, remediation status, and risk metrics using Excel or vulnerability management tools
Support secure coding practices and developer security awareness
Manage multiple security assessments and coordinate tasks across teams

Fulltime

Senior Security Engineer (Red Team Specialist)

We are seeking a highly skilled and experienced Senior Security Engineer Penetra...

Location

Indonesia , Jakarta

Salary:

Not provided

Flip

Expiration Date

Until further notice

Requirements

Bachelor's or Master's degree in Computer Science, Cybersecurity, Information Technology, or a related field
Relevant certifications such as OSCP, OSCE, GPEN, or GXPN are highly desirable
Minimum of 5 years of hands-on experience in penetration testing (mobile applications {Android and iOS}, web applications, and API), red teaming, or ethical hacking, with a proven track record of identifying and exploiting vulnerabilities
Demonstrate a strong grasp of end-to-end SDLC, DevSecOps, and application development for web and mobile applications
Expertise in using various security testing tools and frameworks (e.g., Metasploit, Burp Suite, Nmap, etc.) and manual techniques to conduct thorough security assessments
Proficiency in programming and scripting languages (e.g., Python, Go, Shell Script) to develop custom tools and automation scripts
Strong understanding of network protocols, operating systems, and common security technologies (SIEM, XDR/EDR, firewalls, IDS/IPS, WAFs, etc.)
In-depth knowledge of cybersecurity principles, attack vectors, and defense strategies. Familiarity with threat intelligence and risk assessment methodologies, OWASP, Cloud Security best practices
Excellent analytical and problem-solving abilities, with a proactive approach to identifying and mitigating security risks
Effective verbal and written communication skills, with the ability to convey complex technical concepts to both technical and non-technical stakeholders

Job Responsibility

Lead and conduct penetration testing and red teaming activities against our organization's networks, applications, and physical security
Perform comprehensive security assessments to identify vulnerabilities and potential weaknesses
Develop realistic attack scenarios based on current threat intelligence and industry best practices
Simulate sophisticated attack techniques to identify gaps in our security controls and defenses
Conduct in-depth vulnerability assessments and risk analyses, utilizing various security testing tools and manual techniques
Provide detailed reports outlining identified vulnerabilities and recommended remediation actions
Stay up-to-date with the latest cybersecurity threats, vulnerabilities, and attack techniques
Continuously monitor emerging trends and industry developments to inform our security strategies
Collaborate with the security team and other stakeholders to review and improve our organization's security architecture, ensuring it aligns with industry standards and best practices
Assist the incident response team in handling cybersecurity incidents, performing forensic investigations, and providing expertise on the adversary's techniques and tactics

Fulltime