Senior Application Security Engineer

About the Role
You’ll join the Application Security team within Engineering. The main focus is securing Windows desktop applications, with some work on macOS, iOS and Android.

Responsibilities
Integrate SAST, DAST and SCA tools into CI/CD pipelines to automate security checks.
Coordinate external code reviews and penetration tests, triage findings, assess severity and recommend fixes.
Support product teams with threat modeling and design reviews.
Run the bug bounty program, working with external researchers and the platform vendor.
Validate reported vulnerabilities and verify that fixes work.
Promote secure development practices across the organization.

Requirements
Experience running a bug bounty program and working with SAST, DAST and SCA tools.
Solid knowledge of GitHub, GitHub Actions and GitHub Advanced Security.
Deep experience securing Windows desktop applications, including code review and security analysis.
Development skills in C, C++, C# or Java.
Experience securing cloud, desktop and mobile applications.
Strong written and verbal communication skills in English.
Adaptable, collaborative, and able to work independently with little supervision.

Nice to Have
Red teaming experience.
CISSP, CEH or GIAC (Reverse Engineering) certification.
AWS and Terraform.
Advanced knowledge of macOS, iOS and Android security.
Digital forensics.
Background in security architecture, system administration and networking.