Security engineer

Mechabits; United States; À distance; USD 120 000 - 170 000; Plein temps

Résumé du poste

Mechabits is seeking a hands-on security engineer to help clients and internal teams design, review, and harden modern applications. You will work with product engineers on AppSec and cloud baselines that endure beyond engagements.

You will deliver clear risk language, practical remediation, and reusable playbooks for CI gates, while explaining risk to non-security stakeholders. The role emphasizes OWASP guidance and modern web/API stacks.

Qualifications

• Hands-on application or cloud security experience.
• Ability to explain risk without unnecessary jargon.
• Familiarity with OWASP and modern web / API stacks.
• Clear written English for async collaboration.

Responsabilités

• Perform architecture and application reviews aligned to OWASP practices
• Guide secure auth, secrets, and cloud baselines
• Support remediation with product engineering teams
• Contribute to reusable DevSecOps playbooks and CI gates
• Explain risk clearly to non-security stakeholders

Connaissances

Application security

Cloud security

OWASP awareness

Clear written English

Outils

CI/CD tools

Description du poste

Help clients and Mechabits teams design, review, and harden modern applications - with findings engineers can actually ship.

You will partner with product engineers on AppSec and cloud baselines that stick after the engagement ends. We want clear risk language, practical remediation, and playbooks teams can keep running - not fear-based reports nobody acts on.

Responsibilities

• Perform architecture and application reviews aligned to OWASP practices
• Guide secure auth, secrets, and cloud baselines
• Support remediation with product engineering teams
• Contribute to reusable DevSecOps playbooks and CI gates
• Explain risk clearly to non-security stakeholders

Requirements

• Hands-on application or cloud security experience
• Ability to explain risk without unnecessary jargon
• Familiarity with OWASP and modern web / API stacks
• Clear written English for async collaboration