Full-Time Senior Security Engineer

• Conducting high quality application penetration tests.
• Identifying security vulnerabilities and producing remediation recommendations.
• Leading efforts for prioritizing and resolving security vulnerabilities.
• Driving efforts for security certifications and compliance (e.g. SOC2).
• Performing quarterly internal security tests of Lens Cloud and Desktop.
• Maintaining and updating threat models for core Lens services.
• Triage and validation of SAST and container scanning results.
• Maintaining BCP/DRP policies for Lens.
• Monitoring vulnerabilities in third-party dependencies.
• Auditing secrets usage in Lens codebases and CI/CD pipelines.
• Assessing security risks associated with new SaaS tools or external APIs.

• Experience in a penetration testing or information security role.
• Experience with security engineering practices.
• Experience with dynamic and manual code auditing.
• Experience with interpreted or compiled languages (e.g. Node, JavaScript, TypeScript, Go, C/C++).
• Experience with threat modeling.
• Experience with cloud service providers.
• Experience in developing security tooling and automation.
• Experience in CVE research, and/or Bug Bounty recognition.

What is the last date for applying to the job?

Which countries are accepted for this remote job?