Sr Security Engineer

• The Security Engineer will join an operational security pod acting as the crucial bridge between automated security scanning/remediation systems and product code owners. The mission of this role is to streamline threat modeling, eliminate triage noise, validate exploitability through reproduction, verify automated/agentic patches, and shepherd open security issues through to verified production resolution., * Document trust boundaries, data flows, and architectural entry points to maintain up-to-date threat profiles for high-priority services.
• Filter and triage findings from automated source and endpoint scanners, classifying severity and evaluating exception requests.
• Construct minimal test environments and reproduction harnesses to validate exploitability and eliminate false positives.
• Supervise and QA code patches generated by automated/agentic remediation tools, running unit and integration tests to check for regressions.
• Route validated patches to product team code owners and coordinate end-to-end deployment verification within strict SLAs.
• Conduct code reviews and ensure all fixes comply with secure coding standards (e.g., input validation, memory safety)., * Map trust boundaries, data flows, and architectural entry points to maintain standardized threat profiles.
• Triage findings from automated static and endpoint security scanners, classifying severity and managing exceptions.
• Build minimal reproduction harnesses and test environments to confirm exploitability and eliminate false positives.
• Review, test, and QA automated code patches generated by AI/agentic remediation engines, preventing regressions and ensuring compliance with secure coding standards.

• Understanding of architectural trust boundaries, attack surfaces, and data flows.
• Familiarity with structured threat modeling frameworks (e.g., STRIDE, PASTA).

1. Triage & Policy Management * Working knowledge of common vulnerability classifications (CWE, CVE, OWASP Top 10). * Ability to interpret vulnerability scoring matrices and map findings to strict remediation SLAs.

2. Vulnerability Reproduction * Proficiency in reading and writing code in at least two core languages (C++, Go, Java, Python). * Ability to set up local test harnesses, mock dependencies, and build minimal PoCs.

3. Automated / Agentic Fixer QA * High attention to detail during code reviews (spotting hallucinations, regressions, off-by-one errors). * Understanding of secure coding standards (input validation, boundary checking, safe memory access).

NICE-TO-HAVES

• Experience conducting threat model reviews for large distributed / microservice systems.
• Ability to translate abstract system designs into concrete threat scenarios.
• Experience managing vulnerability queues and reviewing compliance exception requests.
• Familiarity with automated static/dynamic scanning tools.
• Practical experience with fuzz testing, unit test frameworks, and sandbox execution.
• Debugging complex runtime or logic errors across service boundaries.
• Experience debugging and prompt-tuning automated code generation tools.
• Familiarity with automated patch validation and differential testing., 1. Threat Modeling
• Understanding of architectural trust boundaries, attack surfaces, and data flows.
• Familiarity with structured threat modeling frameworks (e.g., STRIDE, PASTA).

1. Triage & Policy Management * Working knowledge of common vulnerability classifications (CWE, CVE, OWASP Top 10). * Ability to interpret vulnerability scoring matrices and map findings to strict remediation SLAs.

2. Vulnerability Reproduction * Proficiency in reading and writing code in at least two core languages (C++, Go, Java, Python). * Ability to set up local test harnesses, mock dependencies, and build minimal PoCs.

3. Automated / Agentic Fixer QA * High attention to detail during code reviews (spotting hallucinations, regressions, off-by-one errors). * Understanding of secure coding standards (input validation, boundary checking, safe memory access).

NICE-TO-HAVES

• Experience conducting threat model reviews for large distributed / microservice systems.
• Ability to translate abstract system designs into concrete threat scenarios.
• Experience managing vulnerability queues and reviewing compliance exception requests.
• Familiarity with automated static/dynamic scanning tools.
• Practical experience with fuzz testing, unit test frameworks, and sandbox execution.
• Debugging complex runtime or logic errors across service boundaries.
• Experience debugging and prompt-tuning automated code generation tools.

InterSources Inc, a Certified Diverse Supplier, was founded in 2007 and offers innovative solutions to help clients with Digital Transformations across various domains and industries. Our history spans over 19 years and today we are an Award-Winning Global Software Consultancy solving complex problems with technology. We recognize that our employees and our clients are our strengths as the diverse talents and opportunities they bring to the table enable us to grow as a global platform and they are causally linked with our success. We provide strategic and technical advice, and we have expertise in areas covering Artificial Intelligence, Cloud Migration, Custom Software Development, Data Analytics Infrastructure & Cloud Solutions, Cyber Security Services, etc. We make reasonable accommodations for clients and employees and we do not discriminate based on any protected attribute including race, religion, color, national origin, gender sexual orientation, gender identity, age, or marital status. We also are a Google Cloud partner company. We align strategy with execution and provide secure service solutions by developing and using the latest technologies that thrive our resources to deliver industry-leading capabilities to our clients and customers, making it convenient for our clients to do business with InterSources Inc. Our teams also drive growth by refining technology-driven client experiences that put the users first, providing an unparalleled experience. This results in strengthening the core technologies of clients, enabling them to scale with flexibility, create seamless digital experiences and build lifelong relationships.