Job Description
Job Summary
Senior Software Security Engineer – Remote. Responsible for analysing software designs, implementations, and security controls throughout the software development lifecycle (SDLC). Focus on threat modelling, secure design, testing, vulnerability management, and DevSecOps integration.
Responsibilities
- Perform threat modelling, risk assessments, and architecture reviews to identify and mitigate risk.
- Support engineering teams in defining detailed security requirements to meet compliance and industry best practices.
- Conduct security code reviews for potential vulnerabilities.
- Serve as a subject matter expert, advising engineering and compliance teams on technical product security matters.
- Define and oversee the deployment of Software Composition Analysis (SCA) tools, generating SBOMs to identify known vulnerabilities and license issues.
- Define and oversee automated security testing tools in CI pip...