{"@context":"https://schema.org","@graph":[{"@context":"https://schema.org/","@type":"JobPosting","@id":"#jobPosting","title":"Application Security Engineer
Ninedots
4 days ago
Role details
Contract type
Permanent contract Employment type
Full-time (> 32 hours) Working hours
Regular working hours Languages
EnglishJob location
Tech stack
Amazon Web Services (AWS)
Software System Penetration Testing
Cloud Computing
Github
Identity and Access Management
Intrusion Detection and Prevention
Python
Software Engineering
Datadog
CircleCI
Static Application Security Testing
Dynamic Application Security Testing
Job description
- Lead threat modeling, security reviews, and pen tests, sit in on architecture meetings to see off problems before they exist.
- Build and automate security tooling and monitoring with CircleCI, GitHub Actions, DataDog, AWS Security Hub, and more.
- Harden everything in sight.
- Review code, and evangelise secure code across the engineering teams.
Requirements
-
Ideally, you started in software engineering (with Python as a primary language).
-
Strong AWS security chops : IAM design, least privilege, encryption, network boundaries, and threat detection. Experience securing CI / CD pipelines, containers, and infrastructure as code.
-
Solid grounding in SAST, DAST, and cloud-native security tooling.
-
You've done pen testing and threat modeling, and maybe built your own tools when nothing fit.
-
Bonus points for supply chain or artifact security experience.
-
You've worked in a startup or scale-up before and know what it's like to ship fast while keeping things locked down. Remote in Ireland or the UK only. You need to be physically based here.
