Responsibilities
- Test the SaaS product for vulnerabilities across web applications, APIs, and cloud infrastructure.
- Perform manual security testing and targeted penetration tests beyond automated scanners.
- Implement and support automated security test suites.
- Identify abuse cases, business logic flaws, and realistic attack paths.
- Collaborate with engineers to reproduce vulnerabilities and drive fixes.
- Introduce threat modeling and secure design reviews into the development process.
- Validate remediation and ensure security issues are fully resolved.
- Monitor emerging vulnerabilities, attack techniques, and SaaS-related threats.
Requirements
- 8+ years of experience in application security, offensive security, or penetration testing.
- Strong understanding of web and API security, including OWASP Top 10, authentication, sessions, and access control.
- Experience testing modern SaaS products.
- Practical experience working in AWS, GCP, or Azure cloud environments.
- Experience with security testing tools such as Burp Suite and Nuclei.
- Ability to communicate security findings clearly and pragmatically to engineers.
- Preferred qualifications include startup or early-stage product experience, bug bounty or responsible disclosure experience, secure code review experience, familiarity with CI/CD and modern SDLC security, and certifications such as OSCP or GWAPT.
Tech Stack
Categories
About DevRev
Computer is the most precise, efficient, and safe AI platform for enterprise search, employee service/help desk, and customer support (including voice). It works by unifying all your existing systems and data into a patented, AI-ready knowledge graph: Native Shared Memory. Every tool, every team, every customer conversation lives in this compounding context. So every answer and action is grounded in what your company knows, and how it operates. With permissions and safety guardrails respected, always. PROVEN EFFICIENCY, PRECISION, AND SAFETY We tested Computer against the market-leading AI on enterprise data: – 48% more accurate – 4.4x fewer tokens used – Cost stays flat at 256x data growth (vs. 29% growth) These results are from “Enterprise-Bench” – the AI industry’s first open, vendor-neutral benchmarking tool. Developed with Laude Institute, validated by Professor Alexandros Dimakis (UC Berkeley). The benchmark model, dataset, and traces are all public. (Feel free to get in touch to learn more.) REAL-WORLD RESULTS More and more companies are trusting Computer: – Bolt: 40% faster ticket resolution. 43% cut in live ticket volume. 25% increase in customer retention. – Bill: 70% of support tickets fully resolved without a human. 100% deployment across all market segments in 15 weeks. Up to $6M in annual savings. – $1.1B org*: 2,000+ new hires onboarded in one year without hiring extra IT staff. 10 weeks to full deployment across all teams. *We can’t reveal the name of our (very) happy customer just yet – but we will soon. DevRev is headquartered in Palo Alto, with eight global offices. We’re backed by Khosla Ventures and Mayfield, with $150M+ raised. Founded by Dheeraj Pandey, former co-founder and CEO of Nutanix [NASDAQ: NTNX], and board member at Adobe [NASDAQ: ADBE], alongside Manoj Agarwal, former SVP of Engineering at Nutanix.