Senior App Security Engineer — Windows Focus & Bug Bounty Lead

Malwarebytes; España; On-site; EUR 70,000 - 87,000; Full time

Benefits offered by this job

Comprehensive medical, dental, and vis

Employee Referral Bonus Program

Wellness programs

Comprehensive Time Off policy

Meaningful impact for self and world

Job summary

Malwarebytes is seeking a Senior Application Security Engineer focused on Windows desktop security. You will own the bug bounty program, automate security in CI/CD, and collaborate with development teams to implement secure design reviews and threat modeling.

The role spans macOS/iOS/Android support as needed and requires independent work in a security-first environment. You will lead security tooling, manage external collaborations for code reviews and pentests, and promote secure development

Qualifications

• Experience securing Windows desktop applications.
• Hands-on with bug bounty programs and security tooling.
• Strong written and verbal communication to explain security topics to technical and non-technical audiences.

Responsibilities

• Automate security processes and tooling in CI/CD with SAST, DAST, and SCA.
• Coordinate security reviews and penetration tests with external firms.
• Advise product teams on application security, threat modeling, and design reviews.
• Manage the bug bounty program and security tools for timely remediation.
• Validate reported vulnerabilities with development teams and verify fixes.
• Promote security best practices and a secure development culture.

Skills

Bug bounty program mgmt

SAST/DAST/SCA tooling

GitHub & Actions

Desktop security (Windows)

Programming: C/C++/C#/Java

Security communication

Independent work

Tools

GitHub

GitHub Actions

GitHub Advanced Security

AWS

Terraform

Job description

Malwarebytes is seeking a Senior Application Security Engineer focused on Windows desktop security. You will own the bug bounty program, automate security in CI/CD, and collaborate with development teams to implement secure design reviews and threat modeling.

The role spans macOS/iOS/Android support as needed and requires independent work in a security-first environment. You will lead security tooling, manage external collaborations for code reviews and pentests, and promote secure development