Software Security Engineer (SMTS/LMTS/PMTS)

Join our GCP team as a Software Security Engineer. In this role, you will enhance our security posture across various domains, focusing on development, vulnerability management, infrastructure security, and the security of distributed systems. You will build and integrate high-performance security tools, develop and secure Terraform/IaC templates, lead the end-to-end vulnerability lifecycle, conduct threat modeling and architectural reviews, act as the technical lead for audits, and troubleshoot complex security issues in production.

• Enhancing security posture across various domains, focusing on development, vulnerability management, infrastructure security, and the security of distributed systems.
• Building and integrating high-performance security tools and custom scripts into CI/CD pipelines to automate manual toil.
• Leading the end-to-end vulnerability lifecycle, using a risk-based approach to prioritize remediation across network, cloud, and application layers.

• Cloud & Infrastructure Expertise: Deep experience with GCP (similar) and Terraform for managing cloud security posture (CSPM) and infrastructure
• Collaborative Spirit: A desire to work cross-functionally with DevOps to embed security into the SDLC
• Engineering Mindset: 5+ years for SMTS, 7+ years for LMTS; 9+ years for PMTS in Security Engineering with a focus on building tools, not just managing them
• Coding Proficiency: Strong experience in Go, Java, or Python with a solid grasp of Object-Oriented Programming and automation
• Security Domain Knowledge: Practical experience with network protocols, OS hardening (Linux), and modern attack vectors
• You have built or contributed to open source tools
• You have experience with secure software development lifecycle practices
• You know container security tools such as Docker and Kubernetes