security automation engineer

Saronic Technologies

<div><div><h2 class="jobSectionHeader">Location</h2>
Austin, TX
</div><div><h2 class="jobSectionHeader">Employment Type</h2>
Full time
</div><div><h2 class="jobSectionHeader">Location Type</h2>
On-site
</div><div><h2 class="jobSectionHeader">Department</h2>
Software</div></div>
 <div><div>Saronic Technologies is a leader in revolutionizing autonomy at sea, dedicated to developing state-of-the-art solutions that enhance maritime operations through autonomous and intelligent platforms.
Security at Saronic is a force multiplier. We're seeking a Security Engineer at the senior-level or above on our Security Operations team with strong detection engineering experience. You'll design and develop high-fidelity detection content, build and operate the data pipelines that power our security operations, develop automation playbooks that accelerate response, and work across a uniquely diverse telemetry landscape spanning cloud infrastructure, embedded vessel platforms, corporate systems, and operational technology. 
<div></div>This role is heavily weighted toward detection engineering. You should think in terms of adversary behavior and telemetry coverage, not just alert triage. You'll own detections end-to-end: from identifying gaps in coverage, through designing and testing detection logic, to tuning and validating in production.
<h1 class="jobSectionHeader">Key Responsibilities:</h1>
<ul><li>Design, build, test, and tune high-fidelity detection rules and analytic queries across endpoint, cloud, network, identity, and DLP telemetry sources
</li><li>Develop and maintain detection content using detection-as-code practices including version-controlled logic, automated testing, and CI/CD deployment
</li><li>Map detection coverage to MITRE ATT&amp;CK, identify gaps, and prioritize new detection development based on threat intelligence and business risk
</li><li>Engineer correlation rules, behavioral analytics, and anomaly-based detections that minimize false positives while surfacing real adversary tradecraft
</li><li>Own the detection lifecycle from initial development through production tuning, performance monitoring, and retirement
</li><li>Build and operate pipelines to ingest, normalize, enrich, and manage security telemetry at scale across diverse data sources, using Terraform and infrastructure-as-code practices to deploy and maintain logging and detection infrastructure
</li><li>Design and maintain log collection, parsing, and enrichment configurations that ensure the right telemetry is available at the right fidelity for detection and investigation
</li><li>Evaluate and onboard new telemetry sources as Saronic's infrastructure and threat landscape evolve
</li><li>Monitor pipeline health, data quality, and ingestion reliability to ensure detections operate on complete and accurate data
</li><li>Develop and manage automated response playbooks in SOAR platforms to accelerate containment and reduce analyst toil
</li><li>Build automation that enriches alerts with contextual data, reducing investigation time and improving analyst decision-making
</li><li>Support incident response efforts and translate lessons learned into improved detections and playbooks
</li><li>Partner with SOC analysts, Cloud Security, Product Security, and IT teams to close visibility and detection gaps across environments
</li><li>Collaborate with threat intelligence to ensure detection engineering is informed by current adversary TTPs relevant to defense, maritime, and autonomous systems
</li></ul><h1 class="jobSectionHeader">Required Qualifications:</h1>
<ul><li>3+ years of hands-on experience in detection engineering, security operations, security automation, or a closely related security engineering role
</li><li>Demonstrated experience designing, testing, and tuning detection rules and analytic queries across production security telemetry (endpoint, cloud, network, identity, or DLP)
</li><li>Hands-on experience with SIEM platforms and proficiency with query languages such as SPL, KQL, or equivalent
</li><li>Experience building and operating security data pipelines, including log ingestion, normalization, enrichment, and data quality management
</li><li>Understanding of data engineering concepts including ETL pipelines, data modeling, schema design, and indexing as applied to security telemetry
</li><li>Hands-on coding experience in Python, PowerShell, Go, or Rust for security automation, detection tooling, or pipeline development, and familiarity with Terraform for managing detection and logging infrastructure as code
</li><li>Understanding of MITRE ATT&amp;CK framework and its application to detection coverage and gap analysis
</li><li>Ability to obtain and maintain a security clearance
</li></ul><h1 class="jobSectionHeader">Preferred Qualifications:</h1>
<ul><li>Experience in defense, aerospace, robotics, autonomy, or other high-assurance environments
</li><li>Experience with EDR platforms including custom detection rule creation and telemetry analysis
</li><li>Experience with cloud-native detection in AWS and Microsoft 365/Azure
</li><li>Experience using Terraform to deploy and manage security monitoring infrastructure, log pipeline components, or cloud-native security service configurations
</li><li>Hands-on experience with incident response, threat hunting, or adversary emulation
</li><li>Exposure to embedded Linux, operational technology, or ICS telemetry and detection
</li><li>Familiarity with NIST SP 800-171, NIST SP 800-53, or CMMC and their logging and monitoring requirements
</li><li>Relevant certifications such as GCIH, GCIA, GCDA, GSOM, OSDA, or OSCP
</li></ul><h1 class="jobSectionHeader">Benefits:</h1>
<ul><li>Medical Insurance: Comprehensive health insurance plans covering a range of services
</li><li>Saronic pays 100% of the premium for employees and 80% for dependents
</li><li>Dental and Vision Insurance: Coverage for routine dental check-ups, orthodontics, and vision care
</li><li>Saronic pays 100% of the premium under the basic plan for employees and 80% for dependents
</li><li>Time Off: Generous PTO and Holidays
</li><li>Parental Leave: Paid maternity and paternity leave to support new parents
</li><li>Competitive Salary: Industry-standard salaries with opportunities for performance-based bonuses
</li><li>Retirement Plan: 401(k) plan
</li><li>Stock Options: Equity options to give employees a stake in the company&rsquo;s success
</li><li>Life and Disability Insurance: Basic life insurance and short- and long-term disability coverage
</li><li>Pet Insurance: Discounted pet insurance options including 24/7 Telehealth helpline
</li><li>Additional Perks: Free lunch benefit and unlimited free drinks and snacks in the office 
</li></ul><div></div>This role requires access to export-controlled information or items that require &ldquo;U.S. Person&rdquo; status. As defined by U.S. law, individuals who are any one of the following are considered to be a &ldquo;U.S. Person&rdquo;: (1) U.S. citizens, (2) legal permanent residents (a.k.a. green card holders), and (3) certain protected classes of asylees and refugees, as defined in 8 U.S.C. 1324b(a)(3).
Saronic does not discriminate on the basis of race, sex, color, religion, age, national origin, marital status, disability, veteran status, genetic information, sexual orientation, gender identity or any other reason prohibited by law in provision of employment opportunities and benefits.</div></div>

Security Engineer, Detection Engineering

MITRE

<div>Why choose between doing meaningful work and having a fulfilling life? At MITRE, you can have both. That's because MITRE people are committed to tackling our nation's toughest challenges&mdash;and we're committed to the long-term well-being of our employees. MITRE is different from most technology companies. We are a not-for-profit corporation chartered to work for the public interest, with no commercial conflicts to influence what we do. The R&amp;D centers we operate for the government create lasting impact in fields as diverse as cybersecurity, healthcare, aviation, defense, and enterprise transformation. We're making a difference every day&mdash;working for a safer, healthier, and more secure nation and world. Our workplace reflects our values. We offer competitive benefits, exceptional professional development opportunities for career growth, and a culture of innovation that embraces adaptability, collaboration, technical excellence, and people in partnership. If this sounds like the choice you want to make, then choose MITRE - and make a difference with us.
The Cyber Solutions Innovation Center creates solutions using threat-informed cybersecurity approaches to enhance the security, safety, and resiliency of critical cyber systems and infrastructure.
The Cyber Assessments and Security Automation department serves as MITRE&rsquo;s resource for cyber risk evaluation and security innovation. Our team is dedicated to advancing the field of cybersecurity by combining deep expertise in risk assessment with cutting-edge automation technologies. This dual focus enables us to address the evolving needs of our sponsors, ensuring scalable and effective cybersecurity solutions that meet today&rsquo;s challenges and anticipate tomorrow&rsquo;s threats.
Our work is defined by innovation, exemplified through initiatives like SAF, ECHO, and ACT, which demonstrate our commitment to developing transformative tools and methodologies. By leveraging automation, we empower organizations to enhance their security posture efficiently and effectively, positioning them to stay ahead in an increasingly complex cyber landscape.
The Cyber Assessments and Security Automation department reflects MITRE&rsquo;s leadership in cybersecurity, making our value clear to sponsors and internal stakeholders alike. We don&rsquo;t just assess risks; we innovate solutions that drive the future of cybersecurity.
The Cyber Assessments and Security Automation department within the Cyber Solutions Innovation Center is seeking a Principal level Cybersecurity Assessment Engineer to lead the department&rsquo;s contributions across our portfolios. The department supports all of MITRE by providing a variety of cyber assessment products plus overall cyber engineering skills. The Principal Cybersecurity Assessment Engineer position will be a core member of the department and government technical team and serve as the first-line support for various sponsors. The position requires direct contributions to our diverse work programs.
Roles &amp; Responsibilities:<ul><li>
Expertise conducting cybersecurity assessments and workshops for government agencies.</li><li>
Define the Security‑Automation Blueprint for sponsor programs.</li><li>
Design and implement Reusable Automation Frameworks that integrate with existing security tools (Nessus, Burp Suite, Qualys, Tenable.io, Splunk, QRadar, eMASS).</li><li>
Develop and implement security strategies, and provide mentorship to junior assessors.</li><li>
Cybersecurity Risk Management: Expert knowledge of cybersecurity risk management frameworks and methodologies.</li><li>
Vulnerability Assessment &amp; Penetration Testing: Conduct vulnerability assessments, penetration testing, and ethical hacking of applications and systems to identify and remediate security weaknesses.</li><li>
Security Controls Assessment: Conduct Security Controls Assessments (SCA), workshops, and audits for internal teams and partner organizations.</li><li>
Security Tools Utilization: Utilize a variety of security tools&mdash;including Burp Suite, Nessus, Splunk, QRadar, WireShark, eMASS, and others&mdash;to support security operations and assessments.</li><li>
Collaborate effectively with MITRE, government, and contractors; effectively communicate in writing, presentations, and collaborative discussions; and interface with peers, managers, and sponsors.</li><li>
Promote collaboration and integration with other organizational elements within the department and across MITRE.</li></ul>
Basic Qualifications:<ul><li>
Requires a minimum of 10 years of related experience with a Bachelor&rsquo;s degree; or 8 years and a Master&rsquo;s degree; or a PhD with 5 years&rsquo; experience; or equivalent combination of related education and work experience.</li><li>
Automation &ndash; Ansible, Terraform, CloudFormation, Chef, Puppet, SaltStack.</li><li>
CI/CD &ndash; GitHub Actions, GitLab CI, Azure DevOps, Jenkins.</li><li>
Familiarity with Windows, Linux, macOS/Open BSD, and VxWorks/Tornado operating systems.</li><li>
Proficiency in programming languages including Java, C#, C++, Python, Perl, Visual Basic, ASP.NET, PHP, COBOL.</li><li>
Experience in software engineering and systems engineering, including requirements analysis and technical writing.</li><li>
Certifications: CISSP, Certified Ethical Hacker (CEH), Network+, AWS Certified Cloud Practitioner.</li><li>
This position requires a minimum of 50% hybrid on-site</li><li>
Must be able to successfully obtain a Top-Secret clearance within one year of hire
</li><li>Per the U.S. Government&rsquo;s eligibility requirements, you must be a U.S Citizen to be considered for a security clearance</li></ul>
Preferred Qualifications:<ul><li>
Graduate-level degree in a technical discipline (Cybersecurity, Information Assurance, etc.).</li><li>
15 years related experience as a cybersecurity analyst/systems engineer.</li><li>
Active Top Secret Security Clearance.</li><li>
Experience with advanced assessment techniques utilizing Kali Linux, Burp Suite, Wireshark, etc.</li><li>
Experience with various Security Information and Event Management (SIEM) platforms (Splunk, QRadar, Tenable products, etc.)</li><li>
Experience with offensive and defensive cybersecurity operations, including penetration testing</li><li>
Experience with various Information Technology (IT) operations in enterprise environments including system integration, device/network hardening, server administration, network maintenance, etc.</li><li>
Certified Information Systems Security Professional (CISSP)</li><li>
GIAC Penetration Tester (GPEN), GIAC Certified Intrusion Analyst (GCIA)</li><li>
CompTIA Security+, CompTIA Network+, CompTIA Linux+</li></ul>
This requisition requires the candidate to have a minimum of the following clearance(s):
Top Secret
This requisition requires the hired candidate to have or obtain, within one year from the date of hire, the following clearance(s):
None
Salary compensation range and midpoint:
$172,800 - $216,000 - $259,200 Annual
Work Location Type:
Hybrid
Commitment to Non-Discrimination
All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, local or international law.
MITRE intends to maintain a website that is fully accessible to all individuals. If you are unable to search or apply for jobs and would like to request a reasonable accommodation for any part of MITRE&rsquo;s employment process, please email recruitinghelp@mitre.org for general support and collegerecruiting@mitre.org for intern positions. This service is for individuals requiring reasonable accommodation requests. Please note that vendor solicitations will not receive a reply.
Benefits information may be found here.
Copyright &copy; 1997-2026, The MITRE Corporation. All rights reserved. MITRE is a registered trademark of The MITRE Corporation. Material on this site may be copied and distributed with permission only.</div>

Principal Cybersecurity Assessment Engineer

International Turnkey Systems - ITS

<div>
 
 For a
 
 well-known Islamic Bank in Kuwait
 
 , we are hiring an AI Penetration Tester to join VMPT team and lead hands-on security testing for LLM/GenAI, ML, and AI-enabled applications (chatbots, RAG, AI agents, model APIs, and AI-assisted business workflows). The role blends traditional penetration testing + secure code review + vulnerability assessment with AI red teaming focused on modern AI risks such as prompt injection and insecure output handling as documented by OWASP&rsquo;s Top 10 for LLM Applications.
 
 
 Candidate is expected to have experience in assessing
 
 Python-based AI development and Azure AI / Azure OpenAI / Microsoft Foundry-hosted model endpoints
 
 .
 
 
 
 
 
 
 Key Responsibilities
 
 
 
 
 
 
 
 AI / LLM penetration Testing &amp; Red Teaming
 
 
 <ul>
 <li>
 Plan and execute AI penetration tests for LLM/GenAI and ML solutions across the bank (AI apps, AI gateways, model endpoints, orchestration layers, RAG pipelines, plugins/tools).
 </li>
 <li>
 Design test cases aligned to OWASP Top 10 for LLM Applications (e.g., prompt injection, insecure output handling, sensitive info disclosure, supply-chain risks).
 </li>
 <li>
 Perform adversarial testing using threat-informed techniques and references such as MITRE ATLAS (adversary tactics/techniques for AI systems).
 </li>
 <li>
 Validate security of agentic workflows (tool invocation, function calling, permissions, memory, connectors) and verify least privilege + authorization boundaries.
 </li>
 </ul>
 
 
 Automation &amp; Tooling
 
 
 <ul>
 <li>
 Build Python-based test harnesses for repeatable AI security testing (fuzzing prompts, jailbreak suites, regression tests, evaluation scoring).
 </li>
 <li>
 Use and extend PyRIT (Python Risk Identification Tool) or equivalent frameworks to probe for jailbreaks/harms and automate adversarial scanning.
 </li>
 <li>
 Where applicable, leverage Microsoft Foundry capabilities such as the AI Red Teaming Agent (preview) that integrates PyRIT red teaming features.
 </li>
 </ul>
 
 
 Secure code review &amp; AppSec
 
 
 <ul>
 <li>
 Conduct secure code review (particularly Python) for AI application layers: prompt templates, RAG retrieval logic, output post-processing, input validation, secrets handling, authZ checks, and logging.
 </li>
 <li>
 Identify and help fix design flaws enabling data leakage, prompt manipulation, unsafe tool usage, or insecure output flows.
 </li>
 </ul>
 
 
 Traditional PT
 
 
 <ul>
 <li>
 Perform web/API/cloud penetration testing for AI-enabled applications (auth, session, API abuse, SSRF, injection, misconfigurations, secrets).
 </li>
 <li>
 Run vulnerability assessments, triage findings, define severity, and validate remediation (re-test).
 </li>
 </ul>
 
 
 
 
 
 Education and Qualification
 
 
 <ul>
 <li>
 Bachelor&rsquo;s degree in computer science, Cybersecurity, Software Engineering, or related discipline.
 </li>
 <li>
 3&ndash;7 years in penetration testing / application security / red teaming.
 </li>
 <li>
 Demonstrated experience testing LLM/GenAI systems (prompt injection, jailbreaks, data exfiltration patterns, agent/tool abuse).
 </li>
 <li>
 Strong hands-on Python for security automation and test harness development.
 </li>
 <li>
 Practical experience with Azure security concepts (identity, networking, secrets, logging) and exposure to Azure AI / Azure OpenAI / Foundry style deployments.
 </li>
 <li>
 Strong report writing, clear communication, ability to work with developers on remediation.
 </li>
 </ul>
 
 
 A Must Certificates (at least one)
 
 
 <ul>
 <li>
 OffSec OSCP / OSCP+
 </li>
 <li>
 GIAC GPEN
 </li>
 <li>
 Microsoft Certified: Azure Security Engineer Associate (AZ-500)
 </li>
 <li>
 ISC2 CCSP
 </li>
 </ul>
 
 
 Strongly Preferred
 
 
 <ul>
 <li>
 OffSec OSWE (advanced web exploitation / white-box testing)
 </li>
 <li>
 Burp Suite Certified Practitioner (BSCP)
 </li>
 <li>
 Microsoft Certified: Azure AI Engineer Associate (AI-102) (helps align with Azure AI implementation patterns).
 </li>
 </ul>
 
 
 Tools &amp; Technologies Skills
 
 
 <ul>
 <li>
 Python, Git, CI/CD integration
 </li>
 <li>
 Burp Suite, common PT toolchains (Kali, scanners, API tooling)
 </li>
 <li>
 Azure security controls (identity, key management, logging/monitoring)
 </li>
 <li>
 AI red teaming tooling (e.g., PyRIT / Foundry scans)
 </li>
 </ul>
 
 
</div>

AI Penetration Testing Specialist

Crescent Solutions Services

Position Overview:The Security Engineer, Platform &amp; Tooling owns the shared automation backbone that serves both security-operations teams (Red, Blue, Purple) and the product SDLC. The mandate is twofold:- Eliminate operational toil by building reliable pipelines for scans, telemetry, and evidence management.- Embed security into DevOps workflows (DevSecOps) so vulnerabilities are identified and remediated early.Responsibilities:CI/CD &amp; DevSecOps Automation- Integrate SAST (Semgrep), DAST (ZAP, Burp), and SCA scanners into GitHub/GitLab pipelines.- Enforce IaC and container-image checks (Terraform, CloudFormation, Dockerfile linters).- Publish build-stage security metrics (OWASP risk tags, pass/fail gates) to engineering dashboards.Offensive &amp; Defensive Tooling- Orchestrate bulk scans (ZAP, Nuclei, Semgrep) outside the SDLC for red-team engagements.- Parse SARIF/JSON outputs and route findings to DefectDojo and Jira with de-duplication logic.Telemetry Ingestion &amp; SIEM/XDR Pipelines- Maintain schemas, enrichment, and data-quality checks for Windows/M365, AWS, and Azure logs.- Monitor pipeline health via automated SLIs/SLOs; trigger self-healing routines where feasible.Reusable Artefact Curation- Standardise Nuclei templates, Burp/ZAP add-ons, Sigma rules, and threat-hunt notebooks.- Version and distribute through an internal registry; provide CLI tooling for one-command deployment.Lab &amp; Sandbox Infrastructure- Operate disposable AD forests, cloud sandboxes, and target containers for red/purple exercises.- Provide &ldquo;one-click&rdquo; Terraform/Ansible scripts that bootstrap environments in &lt; 15 minutes.Process Optimisation &amp; Practitioner UX- Conduct quarterly time-motion studies to locate manual pain points.- Produce concise documentation and in-tool help to maximise adoption by security analysts and developers.Metrics &amp; Continuous Improvement- Report KPIs (see below) to leadership; maintain a roadmap aligned with both Ops and SDLC priorities.Requirements:- Programming: Advanced proficiency in Python or Go for pipeline tooling and API integrations.- CI/CD &amp; DevOps: Demonstrable experience with Jenkins, GitHub Actions, GitLab CI, or Azure DevOps;familiarity with GitOps patterns.- Security Scanners &amp; Formats: Hands-on with ZAP, Semgrep, Nuclei, SARIF/JSON, CycloneDX, SBOMs.- Container &amp; Cloud: Docker/Kubernetes, plus AWS or Azure deployment experience; image-hardening andruntime-security controls.- Data Engineering: Log parsing, schema mapping, and streaming (Kafka, Kinesis, or equivalent).- IaC &amp; Configuration Management: Terraform, CloudFormation, Ansible, or similar.- Collaboration: Proven record of working with both software-engineering squads and security-operations teams,translating requirements into intuitive tooling.- Strong proficiency in both written and spoken English.- Adaptability to thrive in dynamic, fast-paced environments and remote work settings.- Effective team player with excellent collaboration and interpersonal skills.- Ability to perform under pressure with a positive attitude and a focus on team success.- Demonstrates high levels of responsibility, reliability, and accountability.- Willingness and ability to travel internationally when required.Nice-to-Haves- Experience with implementing OWASP DSOMM- GIAC Cloud Security Automation (GCSA)- HashiCorp Certified: Terraform Associate- Certified Kubernetes Administrator (CKA)- DevOps or DevSecOps-specific certifications (e.g., DSOE, CDP)What we offer:- Competitive Compensation: Enjoy a salary package tailored to your skills and experience- Comprehensive leave package- Top-Tier Equipment: Stay productive with the latest tools, including a MacBook and iPhone.- Thriving Culture: Immerse yourself in a dynamic, inclusive work environment that fosters growth.Pay: From AED10,000.00 per monthEducation:<ul><li>Bachelor's (Preferred)</li></ul>Experience:<ul><li>Programming in Python : 5 years (Preferred)</li><li>Go: 4 years (Preferred)</li><li>API integrations: 5 years (Preferred)</li><li>CI/CD: 5 years (Preferred)</li><li>DevOps: 5 years (Preferred)</li><li>Security Scanners ZAP, Semgrep, Nuclei (must be hands-on): 5 years (Preferred)</li><li>AWS or Azure : 4 years (Preferred)</li><li>IaC &amp; Configuration Management: Terraform, CloudFormation: 5 years (Preferred)</li></ul>Work Location: In person

Security Engineer, Platform & Tooling

Instabug

<div>Job Purpose 
 
 
As an Application Security Engineer at Luciq, you will help shape and build our application security program alongside the wider team. This is a hands-on, high-ownership role where you will work closely with product and development teams across the full software development lifecycle &mdash; reviewing designs before code is written, identifying risks as features take shape, and ensuring security is embedded into how we build and ship software, not bolted on after the fact. Our stack runs on Ruby on Rails, Go, and Python, deployed on AWS with Terraform managing infrastructure as code and Jenkins powering CI/CD. You will read and review code in these languages &mdash; not just rely on scanner output &mdash; and work with AWS security services (SecurityHub, Inspector, GuardDuty, CloudTrail, CloudFront) to provide visibility and protection across our infrastructure. The role spans web applications, APIs, our mobile SDK (iOS and Android), cloud, and CI/CD &mdash; partnering with engineers, PMs, Platform, and the Security team to make the secure path the default path. This role can be filled at mid-level with a clear growth path to senior-level as you grow into shaping our application security program, or at senior-level if you're already operating at that scope.
You will join a lean Security team, which entails stepping beyond core AppSec for incident triage, addressing customer security questionnaires, or supporting cross-functional cloud and compliance reviews. We value this variety as a core facet of the role; if you are seeking hyper-specialized work restricted strictly to application security, this may not be the right fit. 
 
 
Job Responsibilities
<ul><li>Secure Design &amp; Code Review
</li></ul><ul><li><div><ul><li>Run and lead threat modeling sessions with product and engineering teams during feature design. This is a hands-on role with expectations to deliver fixes in the product as needed while enabling other engineers.
</li><li>Conduct security code reviews and architecture reviews across web applications, APIs, and services in Ruby, Go, and Python
</li><li>Leverage AI and make sure that we enable engineers to adhere to security acceptance criteria. Provide guidance to engineers on secure design as we iterate and build the product.
</li></ul></div></li></ul><ul><li>Vulnerability Management
</li></ul><ul><li><div><ul><li>Validate, triage, and drive remediation of vulnerabilities &mdash; partner with engineering teams across the full lifecycle from discovery through SLA support
</li><li>Coordinate with engineering teams on fix verification and root-cause prevention
</li></ul></div></li></ul><ul><li>Security Automation in CI/CD
</li></ul><ul><li><div><ul><li>Build and maintain automated security testing in CI/CD &mdash; SAST, SCA, secret scanning
</li><li>Tune tooling for signal over noise; integrate findings into developer workflows
</li><li>Operate secret-scanning and leaked-credential response workflows
</li></ul></div></li></ul><ul><li>Cloud &amp; Infrastructure Security
</li></ul><ul><li><div><ul><li>Support cloud security reviews &mdash; IAM policies, network segmentation, container/Kubernetes configurations, and Terraform policy-as-code
</li><li>Work with AWS security services (SecurityHub, Inspector, GuardDuty, CloudTrail, CloudFront) to maintain visibility and detection across our infrastructure
</li></ul></div></li></ul><ul><li>Supply Chain &amp; Build Security
</li></ul><ul><li><div><ul><li>Own dependency risk via SCA, lockfiles, and pinning
</li><li>Drive CI/CD pipeline hardening &mdash; build runners, OIDC-to-cloud, artifact signing, SBOM standards
</li></ul></div></li></ul><ul><li>Cross-functional Security Enablement
</li></ul><ul><li><div><ul><li>Develop secure coding guidelines and reusable patterns that make the secure path the default
</li><li>Drive S-SDLC adoption across engineering teams
</li><li>Review security posture of our mobile SDK across iOS and Android &mdash; data handling, transport security, local storage, IPC, encryption, third-party dependency risk, and SDK consumer-facing security defaults
</li><li>Assess security risks in AI/LLM integrations &mdash; prompt injection, insecure output handling, trust boundaries in agentic architectures
</li><li>Support compliance initiatives (SOC 2, ISO 27001) &mdash; translate control requirements into engineering practices and assist with audit evidence collection
</li>Use AI tooling actively in your own workflow AI-assisted code review, threat modeling drafts, vulnerability research, and security artifact generation and help shape how the rest of engineering uses AI safely 
<li>
</li></ul></div></li></ul> 
 
Job Requirements 
 
Must-Haves
<ul><li>Experience : 3-6 years in application security, or security engineering
</li><li>Education : Bachelor's degree in Computer Science, Information Security, or equivalent practical experience
</li><li>Secure code review in at least one of: Python, Ruby, Go &mdash; can read code and reason about vulnerabilities, not rely on scanner output
</li><li>OWASP Top 10 (Web and API) as root-cause patterns, not a memorized checklist &mdash; including SSRF, insecure deserialization, injection classes, and access-control flaws
</li><li>Threat modeling : practical experience with STRIDE and data flow diagrams; can lead a session with a product team and produce actionable output
</li><li>Auth and identity : working depth in session management, RBAC/ABAC models
</li><li>CI/CD security automation : hands-on experience integrating SAST, SCA, and secret scanning into pipelines and tuning for actionable signal
</li><li>Proactive and ownership-driven &mdash; does not wait to be told what to secure
</li><li>Comfortable working cross-functionally with product engineers, platform engineers, and the wider team
</li><li>Strong analytical and problem-solving abilities
</li><li>Fluent in English , with strong written and verbal communication
 
</li><li>Communication : clear written and verbal communication can explain a vulnerability to an engineer, a PM, or a VP 
 
 
</li></ul>Strong Plus
We expect strong candidates to have some of these not all. The more, the better.
<ul><li>Mobile SDK security : OWASP Mobile Top 10 and MASVS/MASTG; Android (Kotlin) or iOS (Swift); experience with Frida, objection, or MobSF
</li><li>AWS security service depth : SecurityHub, Inspector, GuardDuty, CloudTrail, CloudFront beyond IAM
</li><li>Container and Kubernetes security fundamentals
</li><li>Supply chain depth : SLSA framework, SBOM AI/LLM security : prompt injection mitigations, OWASP LLM Top 10, securing agentic architectures and tool-use boundaries
</li><li>Familiarity with ISO 27001 or SOC 2 . 
 
 
</li></ul>Nice to Have
<ul><li>Terraform and policy-as-code: tfsec, Checkov, OPA/Conftest
</li><li>Experience building or bootstrapping a security program
</li><li>Bug bounty participation, published CVEs, or documented security research
</li><li>Hands-on certifications: OSCP, OSWE, eMAPT
</li><li>Incident response experience &mdash; triage, containment, root-cause analysis
</li><li>Red teaming or purple teaming experience</li></ul></div>

Application Security Engineer

Agoda

<div>
 
 About Agoda
 
 
 
 At Agoda, we bridge the world through travel. Our story began in 2005, when two lifelong friends and entrepreneurs, driven by their passion for travel, launched Agoda to make it easier for everyone to explore the world.
 
 
 Today, we are part of Booking Holdings [NASDAQ: BKNG], with a diverse team of over 7,000 people from 90 countries, working together in offices around the globe. Every day, we connect people to destinations and experiences, with our great deals across our millions of hotels and holiday properties, flights, and experiences worldwide.
 
 
 No two days are the same at Agoda. Data and technology are at the heart of our culture, fueling our curiosity and innovation. If you&rsquo;re ready to begin your best journey and help build travel for the world, join us.
 
 
 We are looking for a hands on Senior Security Engineer to secure our cloud and platform environments. This role works closely with engineering teams and focuses on building, reviewing, and operating security controls using Infrastructure as Code, Kubernetes, and custom security services written in Go and TypeScript.
 
 
 
 Key Responsibilities:
 
 
 
 Secure Cloud Deployment:
 
 
 <ul>
 <li>
 Design, implement, and manage secure cloud deployments across AWS and GCP environments using Terraform.
 </li>
 <li>
 Kubernetes &amp; GitOps Security: Deploy and manage both internal and third‑party security products within the Kubernetes ecosystem.
 </li>
 <li>
 Work with GitOps workflows using tools like Argo CD and Flux, and Helm charts.
 </li>
 <li>
 Security Automation &amp; Tooling: Design and build security tooling and services using Go and TypeScript.
 </li>
 <li>
 Misconfiguration Management: Proactively identify, analyze, and remediate cloud misconfigurations.
 </li>
 <li>
 Cloud Architecture Guidance: Provide guidance to Engineering teams on secure architecture.
 </li>
 <li>
 Threat Detection &amp; Response: Build and optimize cloud-native detection rules and alerting pipelines to monitor for suspicious activities within the cloud and container workloads.
 
 
 </li>
 </ul>
 
 Required Skills &amp; Experience:
 
 
 
 <ul>
 <li>
 8+ years of experience in security engineering, cloud security, or platform engineering roles.
 </li>
 <li>
 Hands-on experience securing production workloads in AWS and GCP.
 </li>
 <li>
 Strong experience designing and securing Infrastructure as Code using Terraform.
 </li>
 <li>
 Deep understanding of Kubernetes security, including troubleshooting Helm deployments and GitOps-based workflows.
 </li>
 <li>
 Strong programming skills in Go and TypeScript, with Python used for automation where appropriate.
 </li>
 <li>
 Experience embedding security controls into CI/CD pipelines.
 </li>
 <li>
 Certifications (Required) Certified Kubernetes Administrator (CKA) Certified Kubernetes Security Specialist (CKS) Certifications (Preferred) AWS Certified Security
 </li>
 <li>
 Specialty Google Professional Cloud Security Engineer HashiCorp Certified: Terraform Associate
 </li>
 <li>
 Nice-to-Have Experience with Policy-as-Code frameworks such as Open Policy Agent (OPA).
 </li>
 <li>
 Experience securing service mesh environments (Istio). Background in software engineering or platform engineering before moving into security.
 
 
 </li>
 </ul>
 #sanfrancisco #sanjose #losangeles #sandiego #oakland #denver #miami #orlando #atlanta #chicago #boston #detroit #newyork #portland #philadelphia #dallas #houston #austin #seattle #sydney #melbourne #perth #toronto #vancouver #montreal #shanghai #beijing #shenzhen #prague #Brno #Ostrava #cairo #alexandria #giza #estonia #paris #berlin #munich #hamburg #stuttgart #cologne #frankfurt #hongkong #budapest #jakarta #bali #dublin #telaviv #milan #rome #venice #florence #naples #turin #palermo #bologna #tokyo #osaka #kualalumpur #malta #amsterdam #oslo #manila #warsaw #krakow #doha #alrayyan #riyadh #jeddah #mecca #medina #singapore #seoul #barcelona #madrid #stockholm #zurich #taipei #tainan #taichung #kaohsiung #bangkok #Phuket #istanbul #london #manchester #edinburgh #hcmc #hanoi #lodz #wroclaw #poznan #katowice #rio #salvador #newdelhi #bangalore #bandung #yokohama #nagoya #okinawa #fukuoka #jerusalem #IT #4
 
 
 Please review our Hiring Process Guidelines before your interview &mdash; click here to learn how interviewing at Agoda works.
 
 
 
 Discover More About Working At Agoda
 
 
 
 <ul>
 <li>
 Agoda Careers https://careersatagoda.com
 </li>
 <li>
 Facebook https://www.facebook.com/agodacareers/
 </li>
 <li>
 LinkedIn https://www.linkedin.com/company/agoda
 </li>
 <li>
 YouTube https://www.youtube.com/agodalife
 
 
 </li>
 </ul>
 
 Equal Opportunity Employer
 
 
 
 At Agoda, we pride ourselves on being a company represented by people of all different backgrounds and orientations. We prioritize attracting diverse talent and cultivating an inclusive environment that encourages collaboration and innovation. Employment at Agoda is based solely on a person&rsquo;s merit and qualifications. We are committed to providing equal employment opportunity regardless of sex, age, race, color, national origin, religion, marital status, pregnancy, sexual orientation, gender identity, disability, citizenship, veteran or military status, and other legally protected characteristics.
 
 
 We will keep your application on file so that we can consider you for future vacancies and you can always ask to have your details removed from the file. For more details please read our privacy policy.
 
 
 
 Disclaimer
 
 
 
 We do not accept any terms or conditions, nor do we recognize any agency&rsquo;s representation of a candidate, from unsolicited third-party or agency submissions. If we receive unsolicited or speculative CVs, we reserve the right to contact and hire the candidate directly without any obligation to pay a recruitment fee.
 
 
</div>

Security Engineer (Bangkok Based, Relocation Support)

INSPYR Solutions

<div>
 
 
 Title:
 
 &nbsp;Information Security - Offensive Security Analyst
 
 
 Location:
 
 Deerfield Beach, FL (Hybrid 3/2)
 
 
 Duration:
 
 Direct Hire&nbsp;
 
 
 Compensation:
 
 $100,000 - $110,000
 
 
 Work Requirements:
 
 US Citizen, GC Holders or Authorized to Work in the U.S.
 
 
 
 Information Security - Offensive Security Analyst
 
 
 
 Description
 
 
 
 The ideal candidate is someone with a strong software development or engineering background who is intentionally transitioning into the offensive security space. This role is well-suited for an individual who enjoys building systems, tooling, and automation, and wants to apply those skills to help design, scale, and modernize offensive security capabilities.
 
 
 Success in this role comes from thinking like both an engineer and an attacker &amp;mdash; identifying gaps not just in controls, but in how security capabilities themselves are constructed, integrated, and scaled.
 
 
 This role is responsible for building and scaling offensive security capabilities&nbsp;through adversary-focused testing, attack simulation, and custom tooling and automation. The analyst will help shift the program from a primarily tool- and vendor-driven model toward a build-first approach, leveraging software engineering, automation, and AI-assisted techniques to increase coverage, depth, and repeatability of offensive security activities.
 
 
 
 Responsibilities include but are not limited to
 
 
 <ul>
 <li>
 Conduct offensive security activities including penetration testing, attack simulations, threat-based assessments, and control validation across on-prem, cloud, identity, and SaaS environments.
 </li>
 <li>
 Execute and assist in the development of red team and purple team exercises, collaborating with detection and response teams to validate defensive coverage.
 </li>
 <li>
 Perform vulnerability and exploitation analysis, including chaining weaknesses to demonstrate real-world attack paths and business risk.
 </li>
 <li>
 Identify, validate, and responsibly disclose security weaknesses to stakeholders, providing clear remediation guidance and risk context.
 </li>
 <li>
 Design, develop, and maintain custom offensive security tooling (Python, PowerShell, Bash, or similar), including frameworks, reusable modules, and automation that scale testing beyond point-in-time assessments.
 </li>
 <li>
 Evaluate when to build versus buy offensive security capabilities, with a bias toward internal tooling where it improves flexibility, visibility, or speed of iteration.
 </li>
 <li>
 Incorporate AI-assisted techniques (e.g., automation, chaining analysis, signal prioritization) to increase testing efficiency and analyst leverage
 </li>
 <li>
 Contribute documentation such as test reports, playbooks, findings templates, and executive-level summaries.
 </li>
 <li>
 Contribute to the long-term architecture of the offensive security program, including shared libraries, testing pipelines, data models, and reporting outputs optimized for reuse and scale.
 </li>
 <li>
 Mentor junior analysts and contribute to team knowledge sharing.
 </li>
 <li>
 Partner with application and platform engineering teams not only to test systems, but to co-design secure patterns, reference implementations, and reusable testing components.
 </li>
 <li>
 Build developer-consumable assets (templates, scripts, sample exploits, safe test harnesses) that enable teams to self-validate security assumptions earlier in the SDLC.
 </li>
 <li>
 Provide developer-friendly remediation guidance, proof-of-concepts, and secure coding recommendations that are actionable and aligned to real-world development workflows.
 </li>
 <li>
 Support the integration and tuning of security testing tools within CI/CD pipelines, balancing detection depth with developer experience and signal quality.
 </li>
 <li>
 Collaborate with Security Engineering and Application teams to improve self-service security capabilities, documentation, and testing patterns that developers can reuse.
 </li>
 <li>
 Participate in post-testing debriefs with developers to educate, coach, and improve security outcomes&amp;mdash;not just report findings.
 </li>
 </ul>
 
 
 Desired Skills
 
 
 <ul>
 <li>
 Hands-on experience with penetration testing, red team, purple team, or adversary emulation activities.
 </li>
 <li>
 Strong understanding of Windows, Active Directory, Azure/Entra ID, networking, cloud platforms, and SaaS architectures.
 </li>
 <li>
 Experience with common offensive security tools and frameworks (e.g., C2 frameworks, vulnerability scanners, exploit frameworks).
 </li>
 <li>
 Knowledge of MITRE ATT&amp;CK, kill chains, and attacker tradecraft.
 </li>
 <li>
 Experience validating security controls such as EDR, SIEM, identity protections, email security, and cloud security controls.
 </li>
 <li>
 Strong scripting and automation skills; ability to customize or build tools to support testing objectives.
 </li>
 <li>
 Ability to translate technical findings into clear risk-based narratives for technical and non-technical audiences.
 </li>
 <li>
 Strong analytical, problem-solving, and critical-thinking skills.
 </li>
 <li>
 Ability to work independently while collaborating effectively in cross-functional teams.
 </li>
 <li>
 High attention to detail with a strong sense of ethics and responsible disclosure.
 </li>
 <li>
 Experience working directly with software engineers to remediate vulnerabilities and improve secure development practices.
 </li>
 <li>
 Understanding of modern SDLC and CI/CD pipelines, including how security testing fits into developer workflows.
 </li>
 <li>
 Familiarity with secure coding practices and common vulnerability classes in modern applications (web, APIs, cloud-native services).
 </li>
 <li>
 Ability to communicate security findings in a way that developers can quickly understand, prioritize, and fix.
 </li>
 <li>
 Mindset oriented toward enablement over enforcement, with a focus on reducing friction while improving security outcomes.
 </li>
 <li>
 Background in software engineering, platform engineering, or SRE, with a desire to specialize in security.
 </li>
 <li>
 Experience designing or maintaining production-quality code, not just scripts.
 </li>
 <li>
 Comfort working with APIs, data pipelines, CI/CD systems, and cloud-native services as part of security capability development.
 </li>
 <li>
 Curiosity and practical interest in applying AI/ML-assisted techniques to security testing, automation, and analysis.
 </li>
 </ul>
 
 
 About INSPYR Solutions
 
 
 &nbsp;
 
 Technology is our focus and quality is our commitment. As a national expert in delivering flexible technology and talent solutions, we strategically align industry and technical expertise with our clients' business objectives and cultural needs. Our solutions are tailored to each client and include a wide variety of professional services, project, and talent solutions. By always striving for excellence and focusing on the human aspect of our business, we work seamlessly with our talent and clients to match the right solutions to the right opportunities. Learn more about us at inspyrsolutions.com.
 
 &nbsp;
 
 INSPYR Solutions provides Equal Employment Opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, sex, national origin, age, disability, or genetics. In addition to federal law requirements, INSPYR Solutions complies with applicable state and local laws governing nondiscrimination in employment in every location in which the company has facilities.
 
 &nbsp;
 
 #IND-TELECOM
 
 
 
 Information collected and processed through your application with INSPYR Solutions (including any job applications you choose to submit) is subject to INSPYR Solutions&rsquo; Privacy Policy and INSPYR Solutions&rsquo; AI and Automated Employment Decision Tool Policy: https://www.inspyrsolutions.com/policies/. By submitting an application, you are consenting to being contacted by INSPYR Solutions through phone, email, or text.
 
 
 
</div>

Information Security – Offensive Security Analyst

Search 10000+ Security automation engineer jobs near you this May. New roles added regularly across leading industries. Apply today.