Senior AppSec Engineer: Windows Security & Bug Bounty

Malwarebytes; Italia; On-site; EUR 70,000 - 87,000; Full time

Benefits offered by this job

Comprehensive medical, dental, and vis

Employee Referral Bonus Program

Wellness programs

Comprehensive Time Off policy

Opportunity to do something great for

Job summary

Malwarebytes is seeking a Senior Application Security Engineer focused on Windows applications to join our security-first team. You will identify, triage, and resolve issues, manage the bug bounty program, and collaborate with development teams across platforms including macOS, iOS, and Android.

You will automate security in CI/CD, perform reviews with external firms, and support threat modeling and design reviews.

Qualifications

• Experience managing a bug bounty program and hands-on with SAST, DAST, and SCA tooling.
• Ability to use GitHub and manage relevant GitHub Actions and GitHub Advanced Security features.
• Experience in code review & security analysis of desktop applications. Advanced knowledge of securing Windows desktop applications.
• Software development skills in C, C++, C#, or Java, and experience securing cloud services, desktop, and mobile applications.
• Excellent written and verbal communication skills with the ability to articulate complex security topics clearly to technical and non-technical audiences.
• Able to adapt quickly in a growing organization and solve problems collaboratively across development teams.
• Able to work independently in high-risk environments with minimal supervision, being a self-starter.

Responsibilities

• Automate security processes and tooling within the CI/CD pipeline, including integrating SAST, DAST, and SCA tools to prevent classes of security issues.
• Perform and manage collaboration with external firms on security-focused code reviews and penetration tests. Triage the results and consult teams on severity and resolution.
• Support and consult with product and development teams on application security, including conducting threat modeling and design reviews.
• Administer and support the ongoing bug bounty program and security tools to ensure timely remediation of vulnerabilities. Assist the triage team and maintain effective collaboration with external researchers and the platform vendor.
• Work closely with development teams to validate reported vulnerabilities and verify that implemented fixes adequately mitigate the associated risks.
• Lead efforts to promote security best practices and foster a secure development culture across the organization.

Skills

Bug bounty program management

SAST/DAST/SCA tooling

GitHub & Actions

Desktop security expertise

Security communication

Independent worker

Tools

GitHub Actions

GitHub Advanced Security

Terraform

AWS

Job description

Malwarebytes is seeking a Senior Application Security Engineer focused on Windows applications to join our security-first team. You will identify, triage, and resolve issues, manage the bug bounty program, and collaborate with development teams across platforms including macOS, iOS, and Android.

You will automate security in CI/CD, perform reviews with external firms, and support threat modeling and design reviews.