Agent & Application Security Engineer — Threat Modeling & Enforcement

HushOne, Inc.; Kirkland (WA); On-site; USD 130,000 - 210,000; Full time

Benefits offered by this job

Stock options

401(k) with company match

Gym membership

Remote-friendly around family

Job summary

HushOne, Inc. is seeking a security-focused engineer to review code, connectors and tool execution for authorization failures, injections and data leakage, and to build controls outside model prompts.

You will collaborate with engineers to implement secure defaults, egress restrictions and robust tests. In the role you will define disciplined threat modelling, fix issues end-to-end and treat external content as hostile input by default.

Qualifications

• Practical application security with strong coding skills.
• Disciplined threat modelling and remediation you can walk through end to end.
• You treat all external content as hostile input by default.
• You can fix what you find rather than only reporting it.

Responsibilities

• Review application code, connectors and tool execution for authorization failures, injection, secret leakage and unsafe external actions.
• Build enforceable controls outside model prompts and work with engineers on secure defaults and tests.

Skills

Application security

Threat modelling

Remediation

Secure defaults

Job description

HushOne, Inc. is seeking a security-focused engineer to review code, connectors and tool execution for authorization failures, injections and data leakage, and to build controls outside model prompts.

You will collaborate with engineers to implement secure defaults, egress restrictions and robust tests. In the role you will define disciplined threat modelling, fix issues end-to-end and treat external content as hostile input by default.