22 hours ago
Remote, United KingdomSenior
Responsibilities
- Participate in threat modeling for application and AI-driven architectures.
- Triage SCA, SAST, DAST, and CSPM findings and provide vetted vulnerabilities to engineering teams.
- Support vulnerability management for networks and infrastructure.
- Partner with engineering teams to ensure timely remediation of security findings.
- Perform security assessments, reviews, and internal penetration tests.
- Support application security programs and broader security team initiatives.
- Develop scripts and tools for log analysis, patch management, incident detection, and other repetitive security tasks.
- Build integrations between security tools and existing systems using Python, JavaScript, or Go.
Requirements
- BS or higher in Computer Science or a related field, or equivalent work experience.
- 3+ years of application security experience involving threat modeling, secure design reviews, code reviews, or penetration testing.
- Excellent communication skills and business acumen.
- Proficiency in coding or scripting languages such as Python or Go.
- Web application penetration testing experience, including CTFs or bug bounty work.
- Knowledge and experience with Amazon Web Services security and engineering.
- Experience developing or testing web application technologies.
- Security certifications such as OSCP, OSWP, eCPPT, eWPT, or Security+ are preferred.
- Experience with Linux, Docker, Terraform, and programming against REST APIs.
Benefits
- Remote-first work environment with flexibility and resources.
- Generous paid parental leave, flexible time off, spending accounts, medical insurance, dental insurance, vision insurance, and a sabbatical after five years.
- Non-sales employees are eligible for an annual bonus dependent on individual and company performance.
About G-P
G-P (Globalization Partners) builds a SaaS-based global employment platform with Employer of Record services that let companies hire, onboard, and pay talent in 180+ countries while handling payroll, benefits, and compliance. The remote-first, privately held company earns revenue through platform subscriptions and service fees for EOR, immigration, and compliance support. Founded in 2012, it serves organizations expanding internationally across a range of industries and sizes.