Qureos Mentor

Instabug

<div>Job Purpose 
 
 
As an Application Security Engineer at Luciq, you will help shape and build our application security program alongside the wider team. This is a hands-on, high-ownership role where you will work closely with product and development teams across the full software development lifecycle &mdash; reviewing designs before code is written, identifying risks as features take shape, and ensuring security is embedded into how we build and ship software, not bolted on after the fact. Our stack runs on Ruby on Rails, Go, and Python, deployed on AWS with Terraform managing infrastructure as code and Jenkins powering CI/CD. You will read and review code in these languages &mdash; not just rely on scanner output &mdash; and work with AWS security services (SecurityHub, Inspector, GuardDuty, CloudTrail, CloudFront) to provide visibility and protection across our infrastructure. The role spans web applications, APIs, our mobile SDK (iOS and Android), cloud, and CI/CD &mdash; partnering with engineers, PMs, Platform, and the Security team to make the secure path the default path. This role can be filled at mid-level with a clear growth path to senior-level as you grow into shaping our application security program, or at senior-level if you're already operating at that scope.
You will join a lean Security team, which entails stepping beyond core AppSec for incident triage, addressing customer security questionnaires, or supporting cross-functional cloud and compliance reviews. We value this variety as a core facet of the role; if you are seeking hyper-specialized work restricted strictly to application security, this may not be the right fit. 
 
 
Job Responsibilities
<ul><li>Secure Design &amp; Code Review
</li></ul><ul><li><div><ul><li>Run and lead threat modeling sessions with product and engineering teams during feature design. This is a hands-on role with expectations to deliver fixes in the product as needed while enabling other engineers.
</li><li>Conduct security code reviews and architecture reviews across web applications, APIs, and services in Ruby, Go, and Python
</li><li>Leverage AI and make sure that we enable engineers to adhere to security acceptance criteria. Provide guidance to engineers on secure design as we iterate and build the product.
</li></ul></div></li></ul><ul><li>Vulnerability Management
</li></ul><ul><li><div><ul><li>Validate, triage, and drive remediation of vulnerabilities &mdash; partner with engineering teams across the full lifecycle from discovery through SLA support
</li><li>Coordinate with engineering teams on fix verification and root-cause prevention
</li></ul></div></li></ul><ul><li>Security Automation in CI/CD
</li></ul><ul><li><div><ul><li>Build and maintain automated security testing in CI/CD &mdash; SAST, SCA, secret scanning
</li><li>Tune tooling for signal over noise; integrate findings into developer workflows
</li><li>Operate secret-scanning and leaked-credential response workflows
</li></ul></div></li></ul><ul><li>Cloud &amp; Infrastructure Security
</li></ul><ul><li><div><ul><li>Support cloud security reviews &mdash; IAM policies, network segmentation, container/Kubernetes configurations, and Terraform policy-as-code
</li><li>Work with AWS security services (SecurityHub, Inspector, GuardDuty, CloudTrail, CloudFront) to maintain visibility and detection across our infrastructure
</li></ul></div></li></ul><ul><li>Supply Chain &amp; Build Security
</li></ul><ul><li><div><ul><li>Own dependency risk via SCA, lockfiles, and pinning
</li><li>Drive CI/CD pipeline hardening &mdash; build runners, OIDC-to-cloud, artifact signing, SBOM standards
</li></ul></div></li></ul><ul><li>Cross-functional Security Enablement
</li></ul><ul><li><div><ul><li>Develop secure coding guidelines and reusable patterns that make the secure path the default
</li><li>Drive S-SDLC adoption across engineering teams
</li><li>Review security posture of our mobile SDK across iOS and Android &mdash; data handling, transport security, local storage, IPC, encryption, third-party dependency risk, and SDK consumer-facing security defaults
</li><li>Assess security risks in AI/LLM integrations &mdash; prompt injection, insecure output handling, trust boundaries in agentic architectures
</li><li>Support compliance initiatives (SOC 2, ISO 27001) &mdash; translate control requirements into engineering practices and assist with audit evidence collection
</li>Use AI tooling actively in your own workflow AI-assisted code review, threat modeling drafts, vulnerability research, and security artifact generation and help shape how the rest of engineering uses AI safely 
<li>
</li></ul></div></li></ul> 
 
Job Requirements 
 
Must-Haves
<ul><li>Experience : 3-6 years in application security, or security engineering
</li><li>Education : Bachelor's degree in Computer Science, Information Security, or equivalent practical experience
</li><li>Secure code review in at least one of: Python, Ruby, Go &mdash; can read code and reason about vulnerabilities, not rely on scanner output
</li><li>OWASP Top 10 (Web and API) as root-cause patterns, not a memorized checklist &mdash; including SSRF, insecure deserialization, injection classes, and access-control flaws
</li><li>Threat modeling : practical experience with STRIDE and data flow diagrams; can lead a session with a product team and produce actionable output
</li><li>Auth and identity : working depth in session management, RBAC/ABAC models
</li><li>CI/CD security automation : hands-on experience integrating SAST, SCA, and secret scanning into pipelines and tuning for actionable signal
</li><li>Proactive and ownership-driven &mdash; does not wait to be told what to secure
</li><li>Comfortable working cross-functionally with product engineers, platform engineers, and the wider team
</li><li>Strong analytical and problem-solving abilities
</li><li>Fluent in English , with strong written and verbal communication
 
</li><li>Communication : clear written and verbal communication can explain a vulnerability to an engineer, a PM, or a VP 
 
 
</li></ul>Strong Plus
We expect strong candidates to have some of these not all. The more, the better.
<ul><li>Mobile SDK security : OWASP Mobile Top 10 and MASVS/MASTG; Android (Kotlin) or iOS (Swift); experience with Frida, objection, or MobSF
</li><li>AWS security service depth : SecurityHub, Inspector, GuardDuty, CloudTrail, CloudFront beyond IAM
</li><li>Container and Kubernetes security fundamentals
</li><li>Supply chain depth : SLSA framework, SBOM AI/LLM security : prompt injection mitigations, OWASP LLM Top 10, securing agentic architectures and tool-use boundaries
</li><li>Familiarity with ISO 27001 or SOC 2 . 
 
 
</li></ul>Nice to Have
<ul><li>Terraform and policy-as-code: tfsec, Checkov, OPA/Conftest
</li><li>Experience building or bootstrapping a security program
</li><li>Bug bounty participation, published CVEs, or documented security research
</li><li>Hands-on certifications: OSCP, OSWE, eMAPT
</li><li>Incident response experience &mdash; triage, containment, root-cause analysis
</li><li>Red teaming or purple teaming experience</li></ul></div>

Application Security Engineer

<div>Job Purpose
 
To act as a strategic business partner to assigned departments, driving talent acquisition, performance management, and employee development initiatives. This role is responsible for building Luciq&rsquo;s reputation as an &quot;employer of choice&quot; by leveraging cutting-edge AI tools and data-driven insights to streamline people operations, enhance candidate experience, and develop high-impact talent strategies. 
 
 
Job Responsibilities 
 
 
Strategic Business Partnership &amp; Talent Advisory
<ul><li>Act as a trusted consultant to hiring managers and department leads, deeply understanding their business goals to translate them into proactive talent and workforce planning strategies.
</li><li>Analyze workforce data and trends to anticipate hiring needs and advise leadership on market insights, organizational design, and retention strategies.
</li>Champion a culture of continuous feedback and high performance, guiding managers through performance management cycles with a coaching mindset. 
<li>
 
 
</li></ul>AI-Enabled Recruitment &amp; Sourcing
<ul><li>Own the end-to-end recruitment lifecycle for assigned roles, utilizing AI-powered sourcing tools (e.g., LinkedIn Recruiter) to proactively identify and engage passive, high-quality candidates beyond traditional job boards.
</li><li>Leverage AI-driven screening and assessment platforms to intelligently filter CVs, reduce time-to-hire, and remove unconscious bias from the initial screening process.
</li>Continuously research and pilot new AI recruitment technologies to maintain luciq&rsquo;s competitive edge in sourcing top calibers. 
<li>
 
 
</li></ul>Employer Branding &amp; Data-Driven Engagement
<ul><li>Represent Luciq at employment events and manage employer branding initiatives, using data analytics to measure the ROI of different channels and refine outreach strategies.
</li>Create AI-personalized candidate journeys and nurture campaigns that reinforce luciq&rsquo;s employer brand. 
<li>
 
 
</li></ul>Process Optimization &amp; Automation
<ul><li>Lead the digital transformation of people operations by identifying manual, repetitive tasks and implementing AI workflow automations (e.g., using ChatGPT) to improve efficiency in onboarding, documentation, and employee queries.
</li>Utilize People Analytics tools to generate reports on hiring funnel effectiveness, time-to-productivity, and employee sentiment, presenting actionable insights to leadership. 
<li>
 
 
 
</li></ul>Qualifications &amp; Requirements 
 
 
Experience:
<ul><li>0-2 years of experience in HR, Talent Acquisition, or People Operations, preferably within a high-growth tech or SaaS environment.
</li>Proven experience acting as a strategic partner to business leaders, not just as an order-taker. 
<li>
 
 
</li></ul>AI &amp; Technical Proficiency (Nice to have): 
 
 
<ul><li>AI Native Mindset: You don't just know AI exists; you actively use it to enhance your daily workflow.
</li><li>Tool Proficiency: Hands-on experience with AI tools for sourcing (e.g., LinkedIn Recruiter), content generation (e.g., ChatGPT, Claude), and productivity
</li><li>Data Literacy: Ability to interpret HR metrics and use data to tell a story, influence stakeholders, and drive decisions.
</li><li>Tech-Savvy: Comfortable navigating and adopting new software and platforms quickly.</li></ul></div>

People Partner

<div>Job Purpose
Responsible for developing customer relationships that promote retention and loyalty. Work closely with South America customers to ensure they are satisfied with the services they receive and to improve upon areas of dissatisfaction. 
 
Job Responsibilities
<ul><li>Coach and motivate Customer Success team members to their optimum performance levels.
</li><li>Research and identify the app development industry trends and insights.
</li><li>Work on optimizing the user acquisition funnel.
</li><li>Develop new projects and partnerships to cultivate user awareness and growth.
</li><li>Collaborate with other cross-functional teams on co-joint activities.
</li><li>Delivering and communicating ROI for our South America clients throughout the customer lifecycle.
</li><li>Being the trusted partner for the customer on use cases and product functionality
</li><li>Provide insights to South America customers to ensure that they get the most out of the platform with the aim of helping grow our customer base
</li><li>Represent the voice of the customer to provide input into every core product, marketing and sales process
</li><li>Handel cross-selling and up-selling functions for our current clients
 
Replace &quot;Handel cross-selling and up-selling functions for our current clients&quot; with &quot;Own a book of business (ARR) with clear responsibility for renewals, churn prevention, and expansion .&quot;
</li><li>Lead onboarding and enablement : kickoff, discovery, implementation status checks, enablement plan, and ongoing training, using our Luciq setup &amp; enablement playbooks.
</li><li>Comfort with mobile observability concepts (FFS, crashes, performance, network, alerts) and being able to guide customers on proactive vs. reactive workflows in the product. 
</li></ul> 
Job Requirements
<ul><li>Bachelor degree in Information System or Computer Engineering
</li></ul><ul><li>4+ years of relevant experience.
</li><li>Strong communication, leadership, and interpersonal skills.
</li><li>An analytical mindset to decide actions based on productivity metrics.
</li><li>Strong technology background with knowledge of the mobile apps&rsquo; ecosystem.
</li><li>A proven track record of Technical Account Management or other relevant experience.
</li><li>Experience in managing multiple stakeholders and projects.
</li><li>A listener who is customer-oriented and attentive to their needs.
</li><li>Fluent in spoken and written English &amp; Spanish.
</li><li>Strong communication skills.
</li><li>Communicate effectively in both business and technical contexts.
</li><li>Juggle multiple priorities with competing deadlines.
</li><li>Process-oriented with problem-solving skills.</li></ul></div>

Senior Customer Success Manager- Remote

Join Instabug and explore 3   exciting career opportunities. They're hiring for various roles with options for remote or on-site work. Apply today and become part of their innovative team.

Instabug

About Company

Application Security Engineer

People Partner

Senior Customer Success Manager- Remote