Senior Security Engineer responsible for securing application and cloud infrastructure across AWS environments and payment applications.
Responsibilities
Design, implement and manage cloud security controls and enterprise-level security architecture across AWS; monitor posture and ensure secure configurations.
Configure AWS Shield (Standard and Advanced) for DDoS protection; manage CloudFront security including advanced WAF rules, SSL/TLS and origin protection.
Secure AWS services including EC2, ECS, EKS, Lambda, RDS, S3 and API Gateway across multi-region deployments.
Design network security using VPC, Security Groups, NACLs, Transit Gateway and PrivateLink; manage firewalls, VPN and segmentation.
Lead secure CI/CD pipelines for Node.js and GoLang microservices and integrate security into DevSecOps processes.
Build and evolve Neo4j Graph Analytics for Snowflake, embedding Neo4j Graph Data Science into the Snowflake platform.
Responsibilities
Build and evolve the Neo4j Graph Analytics for Snowflake application
Design and improve the SQL-facing API: stored procedures, UDFs, and the surface area customers call from their warehouses
Own significant parts of the build, release, and deployment pipeline: Snowflake CLI, Gradle, container images, and the Java/Python runtimes that execute inside Snowpark Container Services
Improve the platform's security posture: caller's rights vs. owner's rights stored procedures, restricted caller's rights (RCR), grants, and proactive image scanning
Collaborate with customers and Solution Engineers to turn real-world requirements into scalable features
Build and maintain Application Security Posture Management (ASPM) at the Company scale, automate and support SAST, SCA tools, and improve security practices across Nebius’s cloud platform.
Responsibilities
Build and maintain ASPM at company scale
Automate and support SAST, SCA tools as part of CI/CD pipelines
Improve SAST and secrets detection rules
Identify, analyze, and remediate application security vulnerabilities
Collaborate with development teams to integrate security best practices into SDLC
Build and evolve Neo4j Graph Analytics for Snowflake, embedding Neo4j Graph Data Science into the Snowflake platform.
Responsibilities
Build and evolve the Neo4j Graph Analytics for Snowflake application
Design and improve our SQL-facing API: stored procedures, UDFs, and the surface area customers call from their warehouses
Own significant parts of the build, release, and deployment pipeline: Snowflake CLI, Gradle, container images, and the Java/Python runtimes that execute inside Snowpark Container Services
Improve the platform's security posture: caller's rights vs. owner's rights stored procedures, restricted caller's rights (RCR), grants, and proactive image scanning
Collaborate with customers and Solution Engineers to turn real-world requirements into scalable features
Build systems that give defenders an advantage at a scale few engineering teams encounter, partnering with customer security teams and OpenAI’s product and research groups.
Responsibilities
Partner with customer security leaders and OpenAI’s Go-to-Market team to scope engagements, establish responsibilities, and define measurable success criteria.
Lead technical design and implementation alongside customer engineers. Integrate agents into security workflows, establish access boundaries, and determine which actions require human review.
Build evaluations grounded in the decisions defenders make. For a patching agent, test whether a fix blocks a known exploit while preserving expected application behavior. For a detection system, replay historical attacks alongside normal traffic to measure detection speed and false-positive rates.
Guide production rollout with the engineers who will operate the system. Provide the observability and controls they need to understand system behavior, intervene when necessary, and expand adoption with confidence.
Translate successful approaches across deployments into reusable tools and engineering practices that other defenders can adopt.
Build and deploy AI-powered security tools for enterprise customers, integrating with their infrastructure and workflows.
Responsibilities
Partner with customer security leaders and OpenAI’s Go-to-Market team to scope engagements, establish responsibilities, and define measurable success criteria.
Lead technical design and implementation alongside customer engineers. Integrate agents into security workflows, establish access boundaries, and determine which actions require human review.
Build evaluations grounded in the decisions defenders make. For a patching agent, test whether a fix blocks a known exploit while preserving expected application behavior. For a detection system, replay historical attacks alongside normal traffic to measure detection speed and false-positive rates.
Guide production rollout with the engineers who will operate the system. Provide the observability and controls they need to understand system behavior, intervene when necessary, and expand adoption with confidence.
Translate successful approaches across deployments into reusable tools and engineering practices that other defenders can adopt.
Requirements
Nice to have: security curiosity and experimentation
Nice to have: security community engagement
Nice to have: application security
Nice to have: automated remediation
Nice to have: detection engineering
Responsibilities
Build runnable agent and RAG repositories containing code-reachable Sensitive Information Disclosure and Excessive Agency vulnerabilities.
Develop realistic security scenarios involving tool calling, agent memory, Model Context Protocol (MCP), and other LLM application components.
Create vulnerable, fixed, and hard-negative code variants with minimal security-relevant differences.
Evaluate static application security testing (SAST) tools and assess their ability to detect genuine vulnerabilities while avoiding false positives.
Perform source-to-sink analysis and trace relevant data flows, action paths, and trust boundaries.
Senior Software Engineer - Graph Analytics for SnowflakeNeo4j · Malmö, Sweden
[Infra Div.] DevSecOps/공급망 보안 엔지니어 (5~8년)KRAFTON · Yeoksam, South Korea
Senior/Staff Application Security EngineerNebius · Remote
DevSecOps Senior Automation Platform EngineerCaci · Aberdeen Proving Ground, US
Forward Deployed Engineer (FDE), Cyber - SFOpenAI · San Francisco, US