Senior Security Engineer - DevSecOps & APIs

harnessinc; Stati Uniti; Remoto; USD 120.000 - 180.000; Tempo pieno

Descrizione del lavoro

HarnessInc is seeking a security-focused professional to lead hands-on security work across customer-facing software and internal tools. You will collaborate with engineering and product teams to identify risks, improve secure development practices, and build tooling to embed security into the software lifecycle.

Responsibilities include threat modeling, security testing, and advising on architecture and authentication decisions.

Competenze

• Bachelor's degree in computer science or related field.
• At least five years of relevant industry security experience.
• Experience with DevSecOps and secure SDLC.
• Familiarity with OWASP, NIST, CIS and software supply chain risks.

Mansioni

• Design security APIs, tools, and utilities for internal and external users.
• Threat-model backend services and integrations, and review designs for security risks.
• Test applications, APIs, and code through penetration testing, attack simulations, and manual or automated review.
• Operate security testing tools, including static, dynamic, and dependency analysis, and connect them to CI/CD pipelines.
• Advise developers and product managers on security architecture, standards, vulnerability fixes, and authentication or authorization decisions.
• Help establish security standards and integrate vulnerability management into development workflows.

Conoscenze

Security expertise

Threat modeling

CI/CD security

Formazione

Bachelor's degree in computer science or related field

Strumenti

SAST

DAST

Vulnerability mgmt

Descrizione del lavoro

HarnessInc is seeking a security-focused professional to lead hands-on security work across customer-facing software and internal tools. You will collaborate with engineering and product teams to identify risks, improve secure development practices, and build tooling to embed security into the software lifecycle.

Responsibilities include threat modeling, security testing, and advising on architecture and authentication decisions.