Senior Application Security Engineer
Malwarebytes6 hours ago
Remote, ItalySenior
Responsibilities
- Automate application security processes and integrate SAST, DAST, and SCA tooling into development pipelines.
- Manage the bug bounty program and collaborate with external researchers, firms, and the platform vendor.
- Coordinate security-focused code reviews and penetration tests, then triage findings and advise on severity and remediation.
- Conduct threat modeling, design reviews, vulnerability validation, and verification of implemented fixes.
- Support product and development teams across Windows, macOS, iOS, Android, cloud, desktop, and mobile applications.
- Promote security best practices and foster a secure development culture across the organization.
Requirements
- Substantial experience securing Windows applications, especially Windows desktop applications.
- Experience managing a bug bounty program and hands-on proficiency with SAST, DAST, and SCA tools.
- Ability to use GitHub, GitHub Actions, and GitHub Advanced Security features.
- Experience with code review and security analysis of desktop applications.
- Software development skills in C, C++, C#, or Java, plus experience securing cloud, desktop, and mobile applications.
- Strong communication, independent problem-solving, and collaboration skills in high-risk environments.
- Preferred qualifications include red teaming, CISSP, CEH or GIAC certification, reverse engineering, AWS, Terraform, macOS/iOS/Android security, digital forensics, security architecture, system administration, and networking.
Benefits
- Comprehensive medical, dental, and vision insurance coverage.
- Employee Referral Bonus Program.
- Wellness programs.
- Comprehensive time-off policy.
- Benefits and perks are subject to change by country or region.
About Malwarebytes
Malwarebytes builds cybersecurity software for consumers and businesses, including endpoint protection, EDR, and managed detection and response under its ThreatDown brand. The company sells subscriptions for its Windows/Mac anti-malware apps and cloud-managed security for resource‑constrained IT teams. Founded in 2008 and headquartered in Santa Clara, California, it is privately held.