1 day ago
Salt Lake City, UT, USAStaff+
Base Salary
$100k - $130k/yr
Responsibilities
- Support threat modeling and secure design reviews across the service portfolio.
- Support shift-left security, security in CI/CD, developer guidance, and SAST/SCA remediation workflows.
- Assess API exposure and validate authentication and authorization patterns for organizational APIs.
- Build Python automation for triage tooling, finding pipelines, and security context enrichment.
- Partner with developers to remediate SAST and SCA findings, reduce false positives, and strengthen secure development practices.
Requirements
- Hands-on experience with secure design and threat modeling, API security, offensive security, or SAST/SCA program work.
- Understanding of attack patterns, exploitation techniques, web application security, and API security.
- Practical familiarity with the OWASP Top 10.
- Experience assessing REST and GraphQL APIs.
- Ability to build and maintain AppSec automation in Python.
- Ability to work autonomously while helping establish processes.
- Relevant certifications, cloud-native experience, and AI/LLM security exposure are preferred.
- Developer or engineering experience and fluency in Ruby, Python, and Scala are preferred.
Benefits
- Equity for full-time employees and an annual performance bonus.
- Employer-matched retirement plan.
- Subsidized healthcare with employer-paid dental and vision coverage.
- Telemedicine and virtual mental health counseling.
- Parental leave and unlimited paid time off.
- Monday–Thursday in-office schedule with remote-work flexibility on Friday.
