- Remote, United States
- Remote
- Full-time · Senior
- 5+ years
Lead application security engineering, conduct penetration testing, threat modeling, secure code reviews, and coordinate external assessments to protect Nasuni’s SaaS and hybrid-cloud products.
Responsibilities
- Conduct threat modeling, secure design and targeted code reviews for web applications, APIs, cloud services and appliances.
- Perform manual and tool-assisted penetration testing; document reproducible findings and verify fixes.
- Coordinate external penetration-test scoping, execution, report quality review, remediation tracking and retesting.
- Validate customer-reported vulnerabilities and advise Engineering on prioritization, mitigation and closure.
- Improve SAST, SCA, secrets detection, container scanning and CI/CD security workflows with engineering partners.
Requirements
- Related degree or equivalent practical experience
- Nice to have: Enterprise SaaS
- Nice to have: Hybrid-cloud
- Nice to have: SBOM
- Nice to have: CycloneDX/SPDX