Senior Security Engineer: Threat Modeling & Patches

Stravexa Private Limited; United States; On-site; USD 140,000 - 210,000; Full time

Job summary

Stravexa Private Limited is seeking a Senior Security Engineer to bridge automated security scanning with product engineering teams. You will lead threat modeling, vulnerability triage, exploitability validation, and automated patch QA to drive security issues through production closure.

The role requires hands-on security engineering, strong programming in C++, Go, Java, or Python, and deep knowledge of CWE/CVE, OWASP Top 10, and secure coding practices.

Qualifications

• Strong hands-on experience in Application/Product Security Engineering.
• Experience with Threat Modeling, including trust boundaries, attack surfaces, data flows, STRIDE/PASTA.
• Strong knowledge of CWE, CVE, OWASP Top 10, vulnerability severity, and remediation SLAs.
• Ability to reproduce vulnerabilities, build PoCs, and create test harnesses.
• Strong programming skills in at least 2 of: C++, Go, Java, Python.
• Strong debugging and source-code review experience.
• Knowledge of secure coding practices, input validation, boundary checking, and safe memory access.
• Experience validating automated/AI-generated security patches, including code-diff review and regression testing.
• Ability to work directly with product engineering teams and drive vulnerabilities through verified resolution.

Responsibilities

• Bridge automated security scanning/remediation with product engineering teams.
• Perform threat modeling, vulnerability triage, and exploitability validation.
• Lead automated patch QA and drive security issues through production closure.
• Reproduce vulnerabilities, build PoCs, and review code diffs for patches.

Skills

Threat modeling

Vulnerability triage

Exploitability validation

Automated patch QA

Secure coding practices

C++

Go

Java

Python

Code review

Job description

Stravexa Private Limited is seeking a Senior Security Engineer to bridge automated security scanning with product engineering teams. You will lead threat modeling, vulnerability triage, exploitability validation, and automated patch QA to drive security issues through production closure.

The role requires hands-on security engineering, strong programming in C++, Go, Java, or Python, and deep knowledge of CWE/CVE, OWASP Top 10, and secure coding practices.