Job Description
We are looking for a T-shaped Senior Security Engineer with strong depth in application security and cloud-native infrastructure security. You will work hands‑on across Go services, AWS, Kubernetes/EKS, Istio, CI/CD, and compliance‑driven technical controls to make security part of how we build, deploy, and operate software.
This is an engineering‑first security role. You should be comfortable moving across the stack – from code review and threat modeling to IAM, Kubernetes policy, service mesh security, and secure delivery pipelines – while going deepest on application security and cloud security.
Our main application stack is written in Go.
What You’ll Do
- Own and improve application security across the SDLC, including secure design reviews, threat modeling, security‑focused code review, and CI/CD‑integrated SAST, SCA, and secrets scanning.
- Harden our AWS and Kubernetes/EKS environment, including IAM, network segmentation...