ci cdsastdastowaspincident responsescaapplication securitysecurity engineeringcloud securityencryption
Вакансия из Hirify Global, списка международных tech-компаний Для мэтча и отклика нужен Plus
Пожаловаться
Зарплата и рынок
ЗП не указана
На похожих ролях по рынку
$160к$195кмедиана$223к
50 в выборке
88
Крутая вакансия
развернуть
Отличная роль в продуктовой компании для инженера по безопасности, который любит кодить и исправлять ошибки. Фокус на реальном устранении уязвимостей, а не просто на отчетах, делает эту вакансию очень привлекательной.
Кликните для подробной информации
Зарплата не указанаИнженерный подходСовременный стекВнушительный масштабПоддержка обучения
Оценка от Hirify AI
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Подключить Plus
Описание вакансии
Текст:
Hirify AI/Оригинал
TL;DR
Application Security Engineer (Application Security/Cloud): Remediating vulnerabilities, legacy code, outdated dependencies, and infrastructure weaknesses across a global digital classroom platform with an accent on hands-on code fixes, secure SDLC integration, and developer collaboration. Focus on embedding SAST/DAST/SCA controls, hardening cloud infrastructure, automating incident response, and resolving complex security defects.
Location: Remote within Ohio, EST, or CST
Company
hirify.global provides a digital classroom platform used by schools, students, and teachers worldwide.
What you will do
Use automated scanners and internal risk processes to identify vulnerabilities, deprecated packages, outdated libraries, legacy code, and technical debt.
Implement code-level fixes, refactor legacy components, upgrade dependencies, and modernize applications without disrupting production features.
Collaborate with engineering pods to review security posture, troubleshoot technical issues, remove remediation blockers, and guide developers through secure fixes.
Create security playbooks, coding standards, remediation documentation, and a knowledge base for secure coding practices.
Integrate automated security testing and guardrails into the software development lifecycle, supporting a continuous shift-left security model.
Harden cloud infrastructure with firewalls, intrusion detection, encryption, secure partitioning, and automated incident response capabilities.
Requirements
5–8+ years of experience in Application Security or Security Engineering, including the ability to read code, identify architectural flaws, and implement fixes or remediation scripts.
Proven experience managing technical debt and legacy code paths and safely updating third-party libraries and dependencies.
Strong written communication skills and experience creating security playbooks and remediation documentation.
Experience collaborating directly with developers, pairing to debug technical issues, and delivering code fixes.
Familiarity with cloud-native architectures, containerized applications, CI/CD integrations, and automated security testing systems including SAST, DAST, and SCA.
A proactive builder mindset and ability to implement lasting infrastructure or code-level security safeguards.
Nice to have
Exposure to application security fundamentals, specifically OWASP.
Experience with network configuration and application deployment.
Culture & Benefits
People-first environment focused on improving education and supporting teachers, students, and schools.
Diverse team including startup, Fortune 500, and big technology professionals.
Learning and development support including subsidized courses, certifications, conferences, and access to Udemy.
Opportunity to contribute to a digital education platform used by millions of users worldwide.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →