Senior Application Security Engineer - Windows & Bug Bounty

Malwarebytes; Italia; Vor Ort; EUR 70.000 - 87.000; Vollzeit

Benefits dieser Stelle

Medical insurance

Referral bonus

Wellness program

Time off policy

Meaningful work

Zusammenfassung

Malwarebytes is looking for a Senior Application Security Engineer to join our security-first company. You will secure Windows applications, lead the bug bounty program, and automate security in the CI/CD pipeline while collaborating with development teams.

You will also contribute to macOS, iOS, and Android security as needed and promote secure development across the organization in a growing company.

Qualifikationen

• Proven experience managing a bug bounty program and hands-on with SAST, DAST, and SCA tooling.
• Strong familiarity with GitHub workflows, Actions and security features.
• Experience reviewing and analyzing security of desktop applications, especially Windows.

Aufgaben

• Automate security processes and tooling within the CI/CD pipeline, integrating SAST, DAST, and SCA to prevent issues.
• Collaborate with external firms on security-focused code reviews and pentests; triage results and advise on severity and fixes.
• Support product and development teams with application security, including threat modeling and design reviews.
• Manage and support the bug bounty program and security tools; ensure timely remediation of vulnerabilities.
• Coordinate with triage teams and external researchers; maintain collaboration with the platform vendor.
• Work with developers to validate vulnerabilities and verify fixes mitigate risks.

Kenntnisse

Bug bounty program

SAST

DAST

SCA tooling

GitHub

GitHub Actions

GitHub Advanced Security

Desktop security (Windows)

Code review

Security analysis

C/C++/C#/Java

Communication

Tools

GitHub

GitHub Actions

GitHub Advanced Security

Jobbeschreibung

Malwarebytes is looking for a Senior Application Security Engineer to join our security-first company. You will secure Windows applications, lead the bug bounty program, and automate security in the CI/CD pipeline while collaborating with development teams.

You will also contribute to macOS, iOS, and Android security as needed and promote secure development across the organization in a growing company.