Senior Application Security Platform Engineer

5+ years of experience working in a professional, academic or research environment identifying and remediating security bugs/flaws, assisted by automated pipelines.

Knowledge of common web security vulnerabilities (e.g., OWASP Top 10), client-side security landscape, attack techniques and remediation tactics/strategies.

Experience implementing and tuning SAST, SCA, IaC and Secrets Detection tools effectively, especially fine-tuning static analysis detections with custom rule engines (CodeQL, Semgrep).

Expertise deploying within CI/CD platforms (TeamCity or GitHub Actions) and container orchestration frameworks (e.g.

Kubernetes), including establishing appropriate security controls in them

Experience in establishing monitoring and observability techniques of build pipelines and their outputs.

Architect and support secure software development lifecycle operations embedded in software development pipelines.

Provide technical security guidance to developers, team leads, and producers.

Drive remediation efforts behind internally and publicly identified vulnerabilities.