Remote InfoSec Engineer — Vulnerability & Threat Modeling

Camunda; United States; Remote; USD 120,000 - 160,000; Full time

Benefits offered by this job

Home office budget

Co-working space support

Flexible time off

Health & wellbeing programs

Live Well Lifestyle Spending Account

Retirement and pension contributions

Life and disability insurance

Job summary

Camunda is seeking a security-focused engineer to join a fully remote, AI-enhanced team. You will triage vulnerabilities across SCA, container scans, and external reports, and coordinate fixes with engineering during releases.

The role includes threat modeling sessions and design reviews for new features and architecture changes. You will analyze code with AI-assisted tooling, validate findings, and reproduce issues while applying your own judgment.

Qualifications

• 3+ years in security or software engineering, with at least 2 years in application or product security.
• Experience at a SaaS or software product company working with engineering teams in modern CI/CD and cloud environments.
• Hands-on vulnerability triage with Snyk, Trivy, Semgrep, or CodeQL.
• Threat modeling and design reviews on real systems such as web apps, APIs, or distributed services.
• Proficiency in Java and ability to write scripts and build tools, with AI coding agents in daily work.

Responsibilities

• Vulnerability management: triage findings from SCA, container and code scanning, external reports and internal security testing; assess exposure; coordinate fixes or mitigations with engineering and release teams.
• Threat modeling and security reviews: run threat modeling sessions and design reviews with R&D teams for new features and architecture changes, turning results into prioritized actions.
• Code analysis with LLMs: utilize and improve LLM-assisted tooling to review code, validate findings, and reproduce issues while applying sound judgment.

Skills

Vulnerability triage

Threat modeling

Java

Scripting

AI coding agents

Cloud environments

Tools

Snyk

Trivy

Semgrep

CodeQL

Job description

Camunda is seeking a security-focused engineer to join a fully remote, AI-enhanced team. You will triage vulnerabilities across SCA, container scans, and external reports, and coordinate fixes with engineering during releases.

The role includes threat modeling sessions and design reviews for new features and architecture changes. You will analyze code with AI-assisted tooling, validate findings, and reproduce issues while applying your own judgment.