27 days ago
Cyprus (city not specified)Senior
Responsibilities
- Own one or more AppSec program areas, including plans, risks, and metrics.
- Run security design reviews and threat modeling for features, services, architectures, and AI systems.
- Assess web, mobile, and API applications and identify variants of vulnerability classes across services.
- Coordinate external security assessments and bug bounty findings through triage, prioritization, and fix verification.
- Design secure authentication and authorization between users, services, and internal tools.
- Select, pilot, and tune security tools based on meaningful findings.
- Convert incidents and assessment results into lasting controls, policies, and secure developer defaults.
- Consult development teams on complex security issues and participate in AppSec duty shifts for Critical and High incidents.
Requirements
- Higher education in IT, preferably information security.
- Knowledge of Android and iOS mobile application security, client-server trust, app integrity, bot protection, and account takeover risks.
- Deep knowledge of web and API security, including authentication and authorization flaws, SSRF, injections, and business logic issues.
- Strong understanding of identity and access, OAuth 2.0, OIDC, JWT, signing key rotation, mTLS, service-to-service authentication, and SSO.
- Understanding of AI and LLM-agent security risks, including prompt injection, excessive tool permissions, and sensitive-data access.
- Practical understanding of cloud-native infrastructure, Kubernetes, containers, API gateways, and AWS.
- Experience with threat modeling and security design reviews.
- Understanding of vulnerability management and risk, including severity, SLAs, compensating controls, and risk acceptance.
- Ability to read and review code in at least one language, preferably Golang.
- Track record of leading projects across two or more teams from requirements through verified fixes, with clear written English.
- Experience with secrets and key management, rotation, and response to credential leaks.
- Nice-to-have knowledge of software supply chain security, dependencies, CI/CD pipelines, and source-control platform hardening.
- Nice-to-have experience tuning SAST, DAST, and SCA tools for precision and evaluating noise and cost per real finding.
Benefits
- Annual salary from 70 700 EUR gross.
- Mentoring, career consulting, and learning programs.
- International collaboration and participation in the Global Talent Exchange Program.
- Company-wide challenges, awards, sports activities, employee-led social impact, and volunteering projects.
- Co-financed language courses and internal speaking clubs.
- Final benefits may vary depending on location.
Tech Stack
Categories
About inDrive
inDrive builds a global mobility and urban services marketplace best known for ride-hailing, with additional offerings in intercity rides, delivery, and financial services. The privately held company is headquartered in Mountain View, California, and operates across 48 countries, monetizing through fees on transactions in its app. Its platform emphasizes driver–rider price negotiation and has amassed hundreds of millions of downloads.