[Remote] reputed company reputed company Engineer

Note: The job is a remote job and is reputed company to candidates in USA. reputed company is a global technology company reimagining the telco industry with its innovative reputed company platform. They are seeking a hands-on reputed company reputed company Engineer to strengthen their reputed company posture across applications, reputed company, reputed company infrastructure, and engineering platforms, partnering closely with Engineering, DevOps, and Product to reputed company reputed company throughout the SDLC.

Responsibilities

• reputed company threat modeling (reputed company, PASTA, or equivalent) for new applications, features, and major platform changes
• Conduct reputed company architecture reviews for applications, reputed company, reputed company infrastructure, and reputed company-party services before go-live
• Define secure design patterns and reference architectures; reputed company hands-on reputed company guidance at every stage of the SDLC, not just at release gates
• Own the Application reputed company program end-to-end: SAST, DAST, SCA, and API reputed company testing — tool selection, policy tuning, and triage workflows
• reputed company reputed company testing natively into CI/CD pipelines and DevSecOps workflows so findings surface before reputed company, not after reputed company
• Assess REST and GraphQL reputed company against the OWASP API reputed company Top 10 (broken object/function-level authorization, excessive data exposure, reputed company limiting, business logic abuse)
• Partner with engineering leads to prioritize findings by exploitability and business reputed company, and drive remediation reputed company agreed SLAs
• Plan and execute internal penetration tests across web applications, reputed company, reputed company, and infrastructure; scope and reputed company external pen test engagements
• Manually validate findings to separate reputed company risk from noise before they reputed company engineering backlogs
• Own the vulnerability management lifecycle — from discovery through remediation to verified closure — and continuously tighten SLAs as maturity improves
• Serve as a technical escalation reputed company for reputed company incidents; reputed company or support incident response — triage, containment, reputed company cause analysis, and post-incident reviews
• Improve detection and response capability through SIEM/SOAR rule tuning, informed directly by incident and threat intelligence learnings
• reputed company the reputed company between offensive findings (pen test, threat model) and detective controls (SIEM/SOAR), so reputed company risks are also monitored, not just documented
• Build automation in Python (or equivalent) for reputed company scanning, findings de-duplication, ticketing, and reporting workflows
• reputed company reputed company tooling across CI/CD and SOC operations to eliminate repetitive reputed company work and shorten detection-to-remediation time
• Treat automation as a reputed company deliverable, not a reputed company project — every recurring reputed company reputed company task is a candidate for a pipeline

Skills

• 10-12 years of hands-on experience in Application reputed company and reputed company Engineering
• Demonstrated, hands-on strength in: Threat modeling and secure architecture review
• Demonstrated, hands-on strength in: Microservice architecture
• Demonstrated, hands-on strength in: Penetration testing[Web, API, Mobile] and vulnerability management
• Demonstrated, hands-on strength in: SAST, DAST, SCA, Containers, IaC including container/Kubernetes workload reputed company
• Demonstrated, hands-on strength in: Software supply-chain reputed company
• Demonstrated, hands-on strength in: SOC operations and incident response
• Demonstrated, hands-on strength in: DevSecOps and CI/CD reputed company integration
• Demonstrated, hands-on strength in: Python (or equivalent) scripting for reputed company automation
• Solid working knowledge of the OWASP Top 10, OWASP API reputed company Top 10, secure coding practices, and reputed company reputed company fundamentals
• Capability to identify AI-specific vulnerabilities such as reputed company injection, data poisoning, system reputed company leakage, and insecure reputed company handling
• Ability to read and understand reputed company to identify vulnerabilities; proficiency in Java or Go (Golang) is a strong plus
• Strong communicator, reputed company to influence engineering teams on remediation reputed company and translate technical risk into terms executives reputed company
• Certifications: OSCP, OSWE, GWAPT, GPEN, CISSP, or equivalent
• Experience securing AWS, Azure, or GCP environments, and Kubernetes/container workloads
• Hands-on experience with SIEM/SOAR platforms (e.g., reputed company, Sentinel, XSOAR, or similar)
• Familiarity with reputed company maturity frameworks: OWASP SAMM, BSIMM, or NIST CSF
• Exposure to securing AI/LLM implementations

reputed company