20 hours ago
Base Salary
$150k - $200k/yr
Responsibilities
- Design and develop product security APIs, tools, and utilities for internal and external stakeholders.
- Conduct threat modeling and secure design reviews for backend services and business integrations.
- Perform advanced penetration tests and adversarial attack simulations against Harness modules, APIs, and code.
- Lead manual and automated code reviews to identify vulnerabilities, weaknesses, and anti-patterns.
- Implement and operate SAST, DAST, and SCA tooling and integrate security processes into development pipelines.
- Advise developers and Product Managers on security standards, vulnerability remediation, and security architecture.
- Assess security risks and trade-offs for authentication, authorization, and other product security features.
- Create, review, and implement technical security standards across global engineering teams.
- Collaborate with Engineering and Product to accelerate secure-by-design software releases.
Requirements
- Bachelor of Science in Computer Science or a related degree.
- At least 5 years of relevant industry experience with a strong security focus.
- Experience with DevSecOps practices and secure SDLC methodologies.
- Working knowledge of OWASP, SANS, NIST, and CIS cybersecurity frameworks.
- Ability to explain software supply chain risks and Secure SDLC best practices.
- Experience with public or private cloud environments such as Kubernetes, AWS, GCP, or Azure.
- Professional knowledge of enterprise applications, API development, and modern software delivery processes.
- Previous experience in a cloud-native environment.
- Proficiency in Java or a comparable language and object-oriented programming.
- Hands-on experience with security testing tools and vulnerability management workflows.
Categories
About Harness
Harness builds a SaaS platform for software delivery, combining CI/CD, feature flags, cloud cost management, reliability, and security tooling for engineering and DevOps teams. The privately held company, founded in 2016 and headquartered in San Francisco, sells to enterprises adopting cloud and Kubernetes. Notable customers include United Airlines, Morningstar, and Choice Hotels, and its offerings span testing, deployments, governance, and automation across the software delivery lifecycle.