Application Security Engineer

• Manage the end-to-end HackerOne lifecycle, from triage to remediation and closure.
• Support security incident investigations and implement effective fixes.
• Provide guidance on Okta and Doppler integrations and best practices.
• Design and build security automation to improve scale and efficiency.
• Partner with the Director of Cybersecurity on AppSec, DevSecOps, and cloud security initiatives.

• Hands-on experience with HackerOne or similar bug bounty platforms.
• Strong web application security knowledge (OWASP Top 10, ASVS, threat modelling).
• Experience building security tooling and automation.
• Familiarity with security testing tools such as Burp Suite.
• Exposure to incident response and application security.
• Strong communication and stakeholder engagement skills.

Desirable Skills

• Python scripting.
• SAST, DAST, SCA, and secrets-scanning tools.
• GitHub Actions, Terraform, Kubernetes, and IAM security.
• Okta (OIDC, SAML, MFA) and Doppler experience.
• AWS Cloud Security expertise., * Vulnerability
• AppSec
• Bug Bounty
• pen-testing