A complete application in a minute
Tailored resume and cover letter, ready to send.
DataAnnotation is seeking an Application Security Engineer to evaluate how models reason about secure design and vulnerabilities, and to write guidance a strong AppSec reviewer would give. You’ll threat-model systems, review code and cloud configurations, and hunt for gaps in security coverage.
Responsibilities include threat modeling, security design reviews, and documenting fixes with clear guidance. Remote-friendly, with emphasis on strong English communication and practical, hands-on
OverviewModels are great at spotting the textbook SQL injection and blind to the flaw that only shows up in your architecture: the trust boundary drawn in the wrong place, the deserialization no scanner flags, the IAM policy that quietly grants the world. Someone has to threat-model the whole system, and that someone is you.
OverviewModels are great at spotting the textbook SQL injection and blind to the flaw that only shows up in your architecture: the trust boundary drawn in the wrong place, the deserialization no scanner flags, the IAM policy that quietly grants the world. Someone has to threat-model the whole system, and that someone is you.
As an Application Security Engineer you'll evaluate how models reason about secure design and vulnerabilities, catch the flaws they miss, and write the guidance a strong AppSec reviewer would give.
Common backgrounds: Application Security Engineer, Cloud Security Engineer, Vulnerability Researcher.