Senior Security Engineer – AppSec

Stack

Responsibilities

• ▹Partner as a trusted advisor with engineering teams to champion security-by-design
• ▹Coordinate and execute threat modeling and advanced security tests across the product and infrastructure
• ▹Drive risk-based vulnerability management (for example EPSS), using AI technologies to accelerate security testing
• ▹Design, implement and automate security checks and guardrails (SAST, DAST, secret scanning) in CI/CD pipelines
• ▹Perform deep-dive code and configuration reviews and advocate for secure coding practices

Requirements

• ▹5+ years of dedicated Security Engineering experience, ideally in a high-growth SaaS, e-commerce or fintech environment
• ▹Ability to dive deep into the business logic of a complex SaaS application to uncover and verify elusive attack vectors
• ▹Deep understanding of web and API attack vectors and how to run workloads securely in the cloud (k8s, AWS/GCP/Azure)
• ▹Proven track record of autonomously driving security initiatives from conception to completion
• ▹Proficiency in at least one programming language for scripting and security tool development
• ▹Bachelor's or Master's degree in Computer Science, Cybersecurity, IT or a related technical field (or equivalent practical experience)

Nice to have

• ▹Experience with PCI DSS script security
• ▹Red/Purple Team and advanced penetration testing background, with empathy and collaboration skills to help dev teams fix vulnerabilities
• ▹Hands-on experience with Terraform for securing infrastructure as code
• ▹Familiarity with the GCP, Golang and TypeScript stack
• ▹Automating GRC evidence collection

Soft skills

About the company

vivenu is a global leader in event ticketing tech and one of the fastest-growing live entertainment tech firms. Its API-first platform serves over 10 million end users and handles more than 1 billion requests per month. The company has raised over $65 million and operates six offices worldwide.