Application Security Engineer

G-P; United States; Remoto; USD 110.000 - 170.000; Tempo pieno

Vantaggi offerti da questo lavoro

Competitive pay

Parental leave

Medical insurance

Dental insurance

Vision insurance

Flexible time off

Sabbatical after 5 years

Descrizione del lavoro

Компания G-P занимает лидирующее место в области глобальной платформы занятости и удаленной работы. В открытой роли инженера по безопасности вам предстоит участвовать в моделировании угроз, аудите дизайна и тестировании приложений, обеспечивая безопасность веб-приложений и инфраструктуры в удаленном формате по США.

Требуется 3+ года опыта в области безопасности приложений, знания AWS, Docker, Terraform, Python/Go и умение работать в кросс-матчинг командах.

Competenze

• Требуется диплом BS по информатике или смежной области или эквивалентный опыт.
• 3+ года опыта в приложенческой безопасности: threat modelling, обзор безопасного проектирования, код-ревью, пентесты.

Mansioni

• Участвовать в моделировании угроз совместно с командами разработчиков.
• Фильтровать результаты SCA/SAST/DAST/CSPM, помогать командам в remediation.
• Поддерживать управление уязвимостями для сетей и инфраструктуры.
• Сотрудничать с командами для своевременного устранения уязвимостей.
• Разрабатывать скрипты и инструменты для автоматизации задач безопасности (лог-анализ, патч-мэнеджмент, обнаружение инцидентов).
• Создавать интеграции между инструментами безопасности и существующими системами на Python/JS/Go.

Conoscenze

Python

Go

Threat modeling

Web security

Penetration testing

AWS security

Linux

Docker

Terraform

REST APIs

Formazione

BS in Computer Science or related field

Strumenti

AWS

Docker

Descrizione del lavoro

Описание:

Our leading SaaS-based Global Employment Platform™ enables clients to expand into over 180 countries quickly and efficiently, without the complexities of establishing local entities. At G-P, we’re dedicated to breaking down barriers to global business and creating opportunities for everyone, everywhere. Our diverse, remote-first teams are essential to our success. We empower our Dream Team members with flexibility and resources, fostering an environment where innovation thrives and every contribution is valued and celebrated. The work you do here will positively impact lives around the world. We stand by our promise: Opportunity Made Possible. In addition to competitive compensation and benefits, we invite you to join us in expanding your skills and helping to reshape the future of work. At G-P, we assist organizations in building exceptional global teams in days, not months—streamlining the hiring, onboarding, and management process to unlock growth potential for all.

Задачи:

• Participate in threat modeling exercises with engineering team members for application and AI-driven architectures
• Triage SCA/SAST/DAST/CSPM findings by eliminating false positives and providing well-vetted vulnerabilities to engineering teams
• Support vulnerability management efforts for networks and infrastructure
• Partner with engineering teams ensuring timely remediation of security findings
• Perform security assessments, reviews, and internal penetration tests
• Support application security programs and security team initiatives
• Develop scripts and tools to automate repetitive security tasks, such as log analysis, patch management, and incident detection.
• Build custom solutions to integrate security tools with existing systems using languages like Python, JavaScript, or Go.

Требования:

• Education:BS (or higher) in Computer Science or related field, or equivalent work experience.
• Experience: 3+ years of experience in application security with any combination of the following: threat modeling experience, secure design reviews, code reviews, pen-testing
• Excellent communication skills and business acumen
• Proficiency in coding/scripting languages (e.g., Python, Go etc.).
• Web application penetration testing experience (CTFs, Bug Bounty, etc)
• Amazon Web Services (AWS) security and engineering knowledge and experience
• Experience with developing or testing web application technologies
• Nice to have security certifications (OSCP, OSWP, eCPPT, eWPT, Security+, etc)
• Experience with Linux, Docker, Terraform, and programming against REST APIs

Our ranges are established using objective market benchmarking data for this level of work. Final placement within the range is determined by gender-neutral criteria, including the candidate's relevant skills, experience, and specific qualifications for the role. Actual compensation for this position may vary and will depend on multiple factors such as relevant qualifications, experience, education, and geographic location. For Full-Time Regular Employees, this position is also eligible for additional compensation as follows: Sales Roles: This position is eligible for a commission structure in addition to base salary. Non-Sales Roles: This position is eligible for an annual bonus which is paid dependent on various factors, including and without limitation, individual and company performance in addition to base salary.

Условия:

G-P values its employees and offers excellent benefits and perks including generous paid parental leave, flexible time off, spending accounts, medical insurance, dental insurance, vision insurance, sabbatical after 5 years and more. Individuals residing, or applying to work, in the United States: California or Philadelphia, Pennsylvania, please review the following additional information: G-P will consider qualified applicants with arrest or conviction records in accordance with the California Fair Chance Act, Los Angeles City Fair Chance Act Ordinance, Los Angeles County Fair Chance Act Ordinance, and San Francisco Fair Chance Act Ordinance. Los Angeles applicants can review additional information regarding the Los Angeles City Fair Chance Act here: Fair Chance Initiative for Hiring Ordinance, and Philadelphia applicants can review information pertaining to Philadelphia’s Fair Criminal Record Screening Standards Ordinance here: Fair Chance Poster. Any consideration of a candidate’s background check with arrest or conviction records will include an individualized assessment based on the factors required by applicable law, including the candidate’s specific record and the duties and requirements of the specific job. G-P. Global Made Possible. G-P is a proud Equal Opportunity Employer, and we are committed to building and maintaining a diverse, equitable and inclusive culture that celebrates authenticity. We prohibit discrimination and harassment against employees or applicants on the basis of race, color, creed, religion, national origin, ancestry, citizenship status, age, sex or gender (including pregnancy, childbirth, and pregnancy-related conditions), gender identity or expression (including transgender status), sexual orientation, marital status, military service and veteran status, physical or mental disability, genetic information, or any other legally protected status. G-P also is committed to providing reasonable accommodations to individuals with disabilities. Individuals with disabilities are encouraged to apply for these positions. If you need an accommodation due to a disability during the interview process, please contact us at [e-mail].