You can read and navigate an unfamiliar codebase (Rust, Go, Python) well enough to validate a vulnerability report, trace its impact, and judge whether a proposed fix actually closes it.
You write and maintain automation and security tooling comfortably, and can hold a credible technical conversation in code review.
Experience triaging vulnerability reports or working with a bug bounty program, vulnerability disclosure program, product security team, or similar function.
Practical knowledge of cloud and container security, particularly AWS and Kubernetes.
Familiarity with GitHub security features and securing CI/CD pipelines.
The ability to investigate alerts and vulnerabilities methodically, distinguish genuine risk from noise, and recommend proportionate remediation.
Clear written communication skills for working with external researchers and internal engineering teams.
A self-directed approach and comfort independently managing a security queue.
3+ years in a hands-on security engineering, product security, or vulnerability management role.
An offensive security background, such as penetration testing, CTF participation, vulnerability research, or exploit analysis.
Experience working in an open-source company or contributing security improvements to open-source projects.
Familiarity with cloud-native incident response.

Security Engineer

Summary