Senior Security Architect & Penetration Testing Lead

Playlist; United States; On-site; USD 150,000 - 175,000; Full time

Job summary

Playlist is seeking a Senior Security Engineer to drive the security architecture and support the offensive testing practice of the Product Security team. You’ll partner with engineering to design secure-by-default systems, review architectures for weaknesses, and personally test products the way an attacker would.

You will lead threat modeling for new features and platforms, define secure design patterns and reference architectures, and conduct hands-on penetration testing across web

Qualifications

• 5+ years across multiple security domains with emphasis on architecture, app security and pentesting.
• Verifiable hands-on pentesting skills and ability to plan and execute assessments.
• 2+ years leading architecture reviews, threat modeling, or offensive security engagements.

Responsibilities

• Lead threat modeling and architecture security reviews for new products and major changes.
• Conduct hands-on pentesting of web apps, APIs, mobile clients, and cloud infrastructure.
• Define secure architecture patterns, reference designs, and security requirements.
• Partner with engineering and platform teams to solve complex security design problems.
• Perform targeted code and design reviews to identify exploitable flaws.
• Translate findings into prioritized remediation guidance and retest fixes.
• Stay current on attack techniques and best practices, feeding knowledge back to design reviews.

Skills

Security architecture

Penetration testing

Threat modeling

Cloud security

SAST/DAST/SCA

CI/CD security

Programming (Python/ .NET/ TS)

Leadership

Communication

Tools

Burp Suite

Kali Linux

Semgrep

Snyk

WAF

Job description

Playlist is seeking a Senior Security Engineer to drive the security architecture and support the offensive testing practice of the Product Security team. You’ll partner with engineering to design secure-by-default systems, review architectures for weaknesses, and personally test products the way an attacker would.

You will lead threat modeling for new features and platforms, define secure design patterns and reference architectures, and conduct hands-on penetration testing across web