Remote Security Engineer II — App Security & API

Spotnana; Northern (KY); Hybrid; USD 110,000 - 147,000; Full time

Benefits offered by this job

Equity in stock options

Pre-tax and Roth 401(k) with 4% match

Comprehensive medical/dental/vision/l0

Flexible spending accounts

Flexible PTO + 10 holidays + year-end休

Parental Leave up to 26 weeks

Stipend for cell phone and internet

IATAN travel membership

Pet insurance

Financial wellness tools

Calm app access

Job summary

Spotnana is seeking a Security Engineer II to join our global Security team. This hands-on role focuses on application security, expanding our secure SDLC, owning API security and penetration testing, and advocating best practices across our codebase.

You’ll work closely with Engineering and Product teams to deliver secure, scalable solutions while communicating the business value of reducing risk. Ideal candidates have a strong engineering background, 3+ years of web/mobile security experience,

Qualifications

• 3+ years of web and mobile application security assessment experience.
• Experience securing Java-based, API-driven microservices deployed in a cloud environment.
• Experience implementing secure SDLC practices and automations (SAST, DAST, RAST, IAST).
• Ability to write code in one or more programming languages.

Responsibilities

• Conduct application-level security assessments (threat modeling, code reviews, penetration testing) of internal tools and Spotnana web/mobile apps.
• Provide guidance for bug-fixes on issues found via customer reports, internal testing, tools, or external pentests.
• Incorporate AI tools to accelerate detection and address vulnerabilities.
• Develop API security best practices and implement related controls.
• Implement SAST, DAST, RAST, IAST to identify security bugs earlier in release cycles.
• Deliver security training and awareness for R&D teams.

Skills

Threat modeling

Code reviews

Penetration testing

API security

Security reviews

Security tooling

Automation

Education

Bachelor's degree in Computer Science

Tools

React

Java

Cloud (AWS/Azure)

Job description

Spotnana is seeking a Security Engineer II to join our global Security team. This hands-on role focuses on application security, expanding our secure SDLC, owning API security and penetration testing, and advocating best practices across our codebase.

You’ll work closely with Engineering and Product teams to deliver secure, scalable solutions while communicating the business value of reducing risk. Ideal candidates have a strong engineering background, 3+ years of web/mobile security experience,