Security Engineer, Application
Security Engineer, Application - Greenhouse
<p><strong>Firmus Technologies</strong></p> <p><span data-contrast="none"><span data-ccp-parastyle="FIR Body" data-ccp-parastyle-defn="{&quot;ObjectId&quot;:&quot;baa2b379-a6d3-56f4-af2b-6a08de9434e5|1&quot;,&quot;ClassId&quot;:1073872969,&quot;Properties&quot;:[469777841,&quot;Aeonik&quot;,469777842,&quot;Aeonik&quot;,469777843,&quot;Aeonik&quot;,469777844,&quot;Aeonik&quot;,469769226,&quot;Aeonik&quot;,201342446,&quot;1&quot;,201342447,&quot;5&quot;,201342448,&quot;1&quot;,201342449,&quot;1&quot;,201341986,&quot;1&quot;,268442635,&quot;20&quot;,335551500,&quot;197122&quot;,335559740,&quot;264&quot;,201341983,&quot;0&quot;,335559738,&quot;145&quot;,469775450,&quot;FIR Body&quot;,201340122,&quot;2&quot;,134234082,&quot;true&quot;,134233614,&quot;true&quot;,469778129,&quot;FIRBody&quot;,335572020,&quot;1&quot;,469778324,&quot;Body Text&quot;]}">Firmus Technologies is a global&nbsp;</span><span data-ccp-parastyle="FIR Body">leader</span><span data-ccp-parastyle="FIR Body"> pioneering the development </span></span><span data-contrast="none"><span data-ccp-parastyle="FIR Body">and operation of efficient AI infrastructure across Asia Pacific.</span><span data-ccp-parastyle="FIR Body">&nbsp;</span></span><span data-ccp-props="{&quot;201341983&quot;:0,&quot;335559738&quot;:145,&quot;335559740&quot;:264}">&nbsp;</span></p> <p><span data-contrast="none"><span data-ccp-parastyle="FIR Body">Founded in Australia in 2019, our mission is to create the most efficient AI infrastructure by </span></span><span data-contrast="none"><span data-ccp-parastyle="FIR Body">combining&nbsp;</span><span data-ccp-parastyle="FIR Body">cutting-edge</span><span data-ccp-parastyle="FIR Body">&nbsp;technology with a steadfast commitment to sustainability.</span></span><span data-ccp-props="{&quot;201341983&quot;:0,&quot;335559738&quot;:145,&quot;335559740&quot;:264}">&nbsp;</span></p> <p><span data-contrast="none"><span data-ccp-parastyle="FIR Body">At Firmus, we are unique in our approach. We design, build, and&nbsp;</span><span data-ccp-parastyle="FIR Body">operate</span><span data-ccp-parastyle="FIR Body"> a new class of digital </span></span><span data-contrast="none"><span data-ccp-parastyle="FIR Body">infrastructure – the AI Factory. Through our model-to-grid technology approach, we have pushed </span></span><span data-contrast="none"><span data-ccp-parastyle="FIR Body">the boundaries of multi-generational liquid cooling systems, energy management, AI software </span></span><span data-contrast="none"><span data-ccp-parastyle="FIR Body">orchestration, and construction. For our customers, this approach allows us to make every watt </span></span><span data-contrast="none"><span data-ccp-parastyle="FIR Body">count and deliver low-cost AI tokens globally.</span></span><span data-ccp-props="{&quot;201341983&quot;:0,&quot;335559738&quot;:145,&quot;335559740&quot;:264}">&nbsp;</span></p> <p><strong>Firmus AI Cloud</strong></p> <p><span data-contrast="none"><span data-ccp-parastyle="FIR Body" data-ccp-parastyle-defn="{&quot;ObjectId&quot;:&quot;baa2b379-a6d3-56f4-af2b-6a08de9434e5|1&quot;,&quot;ClassId&quot;:1073872969,&quot;Properties&quot;:[469777841,&quot;Aeonik&quot;,469777842,&quot;Aeonik&quot;,469777843,&quot;Aeonik&quot;,469777844,&quot;Aeonik&quot;,469769226,&quot;Aeonik&quot;,201342446,&quot;1&quot;,201342447,&quot;5&quot;,201342448,&quot;1&quot;,201342449,&quot;1&quot;,201341986,&quot;1&quot;,268442635,&quot;20&quot;,335551500,&quot;197122&quot;,335559740,&quot;264&quot;,201341983,&quot;0&quot;,335559738,&quot;145&quot;,469775450,&quot;FIR Body&quot;,201340122,&quot;2&quot;,134234082,&quot;true&quot;,134233614,&quot;true&quot;,469778129,&quot;FIRBody&quot;,335572020,&quot;1&quot;,469778324,&quot;Body Text&quot;]}">Our large-scale GPU cloud platform, Firmus AI Cloud, is purpose-built </span></span><span data-contrast="none"><span data-ccp-parastyle="FIR Body">to deliver energy-efficient AI&nbsp;</span><span data-ccp-parastyle="FIR Body">compute</span><span data-ccp-parastyle="FIR Body">&nbsp;at scale to customers.</span></span><span data-ccp-props="{&quot;201341983&quot;:0,&quot;335559738&quot;:145,&quot;335559740&quot;:264}">&nbsp;</span></p> <p><span data-contrast="none"><span data-ccp-parastyle="FIR Body">It empowers developers, enterprises, educational institutions, and government users to train and </span></span><span data-contrast="none"><span data-ccp-parastyle="FIR Body">deploy AI models with unmatched efficiency and cost savings. With an ever-growing suite of services </span></span><span data-contrast="none"><span data-ccp-parastyle="FIR Body">and applications, we are committed to delivering a cloud experience that is market-leading, </span></span><span data-contrast="none"><span data-ccp-parastyle="FIR Body">proprietary, and built to scale.</span></span><span data-ccp-props="{&quot;201341983&quot;:0,&quot;335559738&quot;:145,&quot;335559740&quot;:264}">&nbsp;</span></p> <p><strong><span data-contrast="none"><span data-ccp-parastyle="No Spacing">ROLE SUMMARY</span></span></strong><span data-ccp-props="{&quot;335551550&quot;:6,&quot;335551620&quot;:6}">&nbsp;</span></p> <p><span data-contrast="none">Firmus Technologies is seeking a Senior Security Engineer, Application for our Engineering and Technology team. You own application security for Firmus AI Cloud and the internal software that runs it. Automation is how you scale that ownership.&nbsp;Customers provision GPU compute through&nbsp;API and console,&nbsp;software engineers&nbsp;build against it, and our operators run the platform through the same control plane. You own the security of that software: the public APIs, the services behind them, how tenants stay separated inside the application, and the&nbsp;AI&nbsp;assistants and agents we ship on top.</span><span data-ccp-props="{&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559738&quot;:0,&quot;335559739&quot;:0,&quot;335559740&quot;:252}">&nbsp;</span></p> <p><strong><span data-contrast="none"><span data-ccp-parastyle="No Spacing">KEY</span><span data-ccp-parastyle="No Spacing">&nbsp;RESPONSIBILITIES</span></span></strong><span data-ccp-props="{&quot;335551550&quot;:6,&quot;335551620&quot;:6}">&nbsp;</span></p> <p><strong><span data-contrast="none">Automation and secure delivery</span></strong><span data-ccp-props="{&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559685&quot;:0,&quot;335559738&quot;:240,&quot;335559739&quot;:240,&quot;335559740&quot;:252}">&nbsp;</span></p> <ul> <li data-leveltext="" data-font="Symbol" data-listid="14" data-list-defn-props="{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}" data-aria-posinset="1" data-aria-level="1"><span data-contrast="none">Own the CI/CD security gates that every production repository passes through: SAST, DAST, SCA, secrets detection, and SBOM generation.</span><span data-ccp-props="{&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;201341983&quot;:0,&quot;335559738&quot;:240,&quot;335559739&quot;:240,&quot;335559740&quot;:252}">&nbsp;</span></li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="14" data-list-defn-props="{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}" data-aria-posinset="2" data-aria-level="1"><span data-contrast="none">Build the systems that do the repeatable work: finding triage, dependency uplift, evidence collection, and draft threat models.&nbsp;</span><span data-ccp-props="{&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;201341983&quot;:0,&quot;335559738&quot;:240,&quot;335559739&quot;:240,&quot;335559740&quot;:252}">&nbsp;</span></li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="14" data-list-defn-props="{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}" data-aria-posinset="3" data-aria-level="1"><span data-contrast="none">Ship the&nbsp;secure&nbsp;paved roads other teams build on: reusable libraries, service templates, and developer tooling.</span><span data-ccp-props="{&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;201341983&quot;:0,&quot;335559738&quot;:240,&quot;335559739&quot;:240,&quot;335559740&quot;:252}">&nbsp;</span></li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="14" data-list-defn-props="{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}" data-aria-posinset="4" data-aria-level="1"><span data-contrast="none">Write and review code in the services you protect, including the security-critical paths that tools miss.</span><span data-ccp-props="{&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;201341983&quot;:0,&quot;335559738&quot;:240,&quot;335559739&quot;:240,&quot;335559740&quot;:252}">&nbsp;</span></li> </ul> <p><strong><span data-contrast="none">Security architecture and standards</span></strong><span data-ccp-props="{&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;201341983&quot;:0,&quot;335559685&quot;:0,&quot;335559738&quot;:240,&quot;335559739&quot;:240,&quot;335559740&quot;:252}">&nbsp;</span></p> <ul> <li data-leveltext="" data-font="Symbol" data-listid="14" data-list-defn-props="{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}" data-aria-posinset="5" data-aria-level="1"><span data-contrast="none">Set the application security standard&nbsp;and control&nbsp;for authentication, authorisation between services, tenant isolation at the application boundary, secret&nbsp;handling&nbsp;and logging.</span><span data-ccp-props="{&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;201341983&quot;:0,&quot;335559738&quot;:240,&quot;335559739&quot;:240,&quot;335559740&quot;:252}">&nbsp;</span></li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="14" data-list-defn-props="{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}" data-aria-posinset="6" data-aria-level="1"><span data-contrast="none">Lead threat modelling and secure design review. Define what an attacker can do and what&nbsp;must&nbsp;be true before it ships.</span><span data-ccp-props="{&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;201341983&quot;:0,&quot;335559738&quot;:240,&quot;335559739&quot;:240,&quot;335559740&quot;:252}">&nbsp;</span></li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="14" data-list-defn-props="{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}" data-aria-posinset="7" data-aria-level="1"><span data-contrast="none">Set the security requirements for the AI assistants and agents we ship e.g. prompt injection, context poisoning.</span><span data-ccp-props="{&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;201341983&quot;:0,&quot;335559738&quot;:240,&quot;335559739&quot;:240,&quot;335559740&quot;:252}">&nbsp;</span></li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="14" data-list-defn-props="{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}" data-aria-posinset="8" data-aria-level="1"><span data-contrast="none">Govern which tools and tool servers our&nbsp;AI&nbsp;agents and&nbsp;software engineers&nbsp;may reach, and how those integrations are scoped, allow-listed, and audited.</span><span data-ccp-props="{&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;201341983&quot;:0,&quot;335559738&quot;:240,&quot;335559739&quot;:240,&quot;335559740&quot;:252}">&nbsp;</span></li> </ul> <p><strong><span data-contrast="none">Assurance and vulnerability management</span></strong><span data-ccp-props="{&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;201341983&quot;:0,&quot;335559685&quot;:0,&quot;335559738&quot;:240,&quot;335559739&quot;:240,&quot;335559740&quot;:252}">&nbsp;</span></p> <ul> <li data-leveltext="" data-font="Symbol" data-listid="14" data-list-defn-props="{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}" data-aria-posinset="9" data-aria-level="1"><span data-contrast="none">Own application security posture across our services: what is covered, what is open, what is accepted with a named owner and an expiry, and what is overdue.</span><span data-ccp-props="{&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;201341983&quot;:0,&quot;335559738&quot;:240,&quot;335559739&quot;:240,&quot;335559740&quot;:252}">&nbsp;</span></li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="14" data-list-defn-props="{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}" data-aria-posinset="10" data-aria-level="1"><span data-contrast="none">Prioritise fixes on exploitability and exposure alongside CVSS and hold them to the Firmus vulnerability SLAs.</span><span data-ccp-props="{&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;201341983&quot;:0,&quot;335559738&quot;:240,&quot;335559739&quot;:240,&quot;335559740&quot;:252}">&nbsp;</span></li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="14" data-list-defn-props="{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}" data-aria-posinset="11" data-aria-level="1"><span data-contrast="none">Drive remediation with the teams that own the code so issues close at the source.</span><span data-ccp-props="{&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;201341983&quot;:0,&quot;335559738&quot;:240,&quot;335559739&quot;:240,&quot;335559740&quot;:252}">&nbsp;</span></li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="14" data-list-defn-props="{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}" data-aria-posinset="12" data-aria-level="1"><span data-contrast="none">Extend SOC 2 Type 2 and ISO 27001 into the software delivery path as services and sites grow. Evidence that a control ran should be a query, not a spreadsheet exercise.</span><span data-ccp-props="{&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;201341983&quot;:0,&quot;335559738&quot;:240,&quot;335559739&quot;:240,&quot;335559740&quot;:252}">&nbsp;</span></li> </ul> <p><strong><span data-contrast="none">Enablement and escalation</span></strong><span data-ccp-props="{&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;201341983&quot;:0,&quot;335559685&quot;:0,&quot;335559738&quot;:240,&quot;335559739&quot;:240,&quot;335559740&quot;:252}">&nbsp;</span></p> <ul> <li data-leveltext="" data-font="Symbol" data-listid="20" data-list-defn-props="{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}" data-aria-posinset="1" data-aria-level="1"><span data-contrast="none">Coach security champions inside each team so secure design decisions get made without waiting for you.</span><span data-ccp-props="{&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;201341983&quot;:0,&quot;335559738&quot;:240,&quot;335559739&quot;:240,&quot;335559740&quot;:252}">&nbsp;</span></li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="20" data-list-defn-props="{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}" data-aria-posinset="2" data-aria-level="1"><span data-contrast="none">Provide application-security&nbsp;expertise&nbsp;during incidents and convert recurring failure modes into gates, tests, standards, or developer tooling.</span><span data-ccp-props="{&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;201341983&quot;:0,&quot;335559738&quot;:240,&quot;335559739&quot;:240,&quot;335559740&quot;:252}">&nbsp;</span></li> <li data-leveltext="" data-font="Symbol" data-listid="20" data-list-defn-props="{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}" data-aria-posinset="3" data-aria-level="1"><span data-contrast="none">Give engineering leadership a straight read on application risk and release readiness. Join customer conversations when the question is application security.</span><span data-ccp-props="{&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;201341983&quot;:0,&quot;335559738&quot;:240,&quot;335559739&quot;:240,&quot;335559740&quot;:252}">&nbsp;</span></li> </ul> <p><strong><span data-contrast="none"><span data-ccp-parastyle="No Spacing">SKILLS AND EXPERIENCE</span></span><span data-ccp-props="{&quot;335551550&quot;:6,&quot;335551620&quot;:6}">&nbsp;</span></strong></p> <ul> <li data-leveltext="·" data-font="Symbol" data-listid="5" data-list-defn-props="{&quot;335551500&quot;:2448933,&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;·&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}" data-aria-posinset="1" data-aria-level="1"><span data-contrast="auto"><span data-ccp-parastyle="No Spacing">Bachelor's degree in computer science or a related technical field.</span></span><span data-ccp-props="{&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559737&quot;:0,&quot;335559738&quot;:0,&quot;335559739&quot;:0}">&nbsp;</span></li> </ul> <ul> <li data-leveltext="·" data-font="Symbol" data-listid="5" data-list-defn-props="{&quot;335551500&quot;:2448933,&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;·&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}" data-aria-posinset="2" data-aria-level="1"><span data-contrast="none">7+ years in application security, product security, or software engineering with a security focus.</span><span data-ccp-props="{&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;201341983&quot;:0,&quot;335559738&quot;:0,&quot;335559739&quot;:0,&quot;335559740&quot;:252}">&nbsp;</span></li> </ul> <ul> <li data-leveltext="·" data-font="Symbol" data-listid="5" data-list-defn-props="{&quot;335551500&quot;:2448933,&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;·&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}" data-aria-posinset="3" data-aria-level="1"><span data-contrast="none">Experience securing a public cloud or multi-tenant platform with a public API.</span><span data-ccp-props="{&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;201341983&quot;:0,&quot;335559738&quot;:0,&quot;335559739&quot;:0,&quot;335559740&quot;:252}">&nbsp;</span></li> </ul> <ul> <li data-leveltext="·" data-font="Symbol" data-listid="5" data-list-defn-props="{&quot;335551500&quot;:2448933,&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;·&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}" data-aria-posinset="4" data-aria-level="1"><span data-contrast="none">Deep, practical knowledge of the OWASP Top 10 and the OWASP API Security Top 10. Has threat modelled multi-tenant APIs in production: identity, authorisation between services, tenant isolation, and the ways a client abuses a published contract&nbsp;using&nbsp;STRIDE or an equivalent method, both for&nbsp;REST and&nbsp;gRPC.</span><span data-ccp-props="{&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;201341983&quot;:0,&quot;335559738&quot;:0,&quot;335559739&quot;:0,&quot;335559740&quot;:252}">&nbsp;</span></li> </ul> <ul> <li data-leveltext="·" data-font="Symbol" data-listid="5" data-list-defn-props="{&quot;335551500&quot;:2448933,&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;·&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}" data-aria-posinset="5" data-aria-level="1"><span data-contrast="none">Has improved the security posture of software built by other engineering teams through standards, tooling, review, or secure-by-default patterns.</span><span data-ccp-props="{&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;201341983&quot;:0,&quot;335559738&quot;:0,&quot;335559739&quot;:0,&quot;335559740&quot;:252}">&nbsp;</span></li> </ul> <ul> <li data-leveltext="·" data-font="Symbol" data-listid="5" data-list-defn-props="{&quot;335551500&quot;:2448933,&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;·&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}" data-aria-posinset="6" data-aria-level="1"><span data-contrast="none">Has&nbsp;owned CI/CD security gates in production (SAST, DAST, SCA, secrets detection, SBOM) and&nbsp;tuned them to deliver actionable findings with low false-positive rates that engineers trusted and acted upon.</span><span data-ccp-props="{&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;201341983&quot;:0,&quot;335559738&quot;:0,&quot;335559739&quot;:0,&quot;335559740&quot;:252}">&nbsp;</span></li> </ul> <ul> <li data-leveltext="·" data-font="Symbol" data-listid="5" data-list-defn-props="{&quot;335551500&quot;:2448933,&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;·&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}" data-aria-posinset="7" data-aria-level="1"><span data-contrast="none">Writes production-quality code in at least one of Python, Go, or TypeScript.</span><span data-ccp-props="{&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;201341983&quot;:0,&quot;335559738&quot;:0,&quot;335559739&quot;:0,&quot;335559740&quot;:252}">&nbsp;</span></li> </ul> <ul> <li data-leveltext="·" data-font="Symbol" data-listid="5" data-list-defn-props="{&quot;335551500&quot;:2448933,&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;·&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}" data-aria-posinset="8" data-aria-level="1"><span data-contrast="none">Has replaced manual security work with automation: finding triage, dependency uplift, evidence collection, or regression tests that run without someone watching them.</span><span data-ccp-props="{&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;201341983&quot;:0,&quot;335559738&quot;:0,&quot;335559739&quot;:0,&quot;335559740&quot;:252}">&nbsp;</span></li> </ul> <ul> <li data-leveltext="·" data-font="Symbol" data-listid="5" data-list-defn-props="{&quot;335551500&quot;:2448933,&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;·&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}" data-aria-posinset="9" data-aria-level="1"><span data-contrast="none">Hands-on with LLM-backed or agentic features: prompt injection, tool misuse, agent identity and delegated credentials, cross-tenant data leakage, and controls on generated code reaching production. Familiar with OWASP guidance for LLM and agentic applications.</span><span data-ccp-props="{&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;201341983&quot;:0,&quot;335559738&quot;:0,&quot;335559739&quot;:0,&quot;335559740&quot;:252}">&nbsp;</span></li> </ul> <ul> <li data-leveltext="·" data-font="Symbol" data-listid="5" data-list-defn-props="{&quot;335551500&quot;:2448933,&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;·&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}" data-aria-posinset="10" data-aria-level="1"><span data-contrast="none">Deep practical experience with OAuth, OIDC, JWT, RBAC or ABAC, application-layer cryptography, token handling, and secrets in software.</span><span data-ccp-props="{&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;201341983&quot;:0,&quot;335559738&quot;:0,&quot;335559739&quot;:0,&quot;335559740&quot;:252}">&nbsp;</span></li> </ul> <ul> <li data-leveltext="·" data-font="Symbol" data-listid="5" data-list-defn-props="{&quot;335551500&quot;:2448933,&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;·&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}" data-aria-posinset="11" data-aria-level="1"><span data-contrast="none">Has worked under SOC 2 Type 2 or ISO 27001 and can produce evidence that a control ran.</span><span data-ccp-props="{&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;201341983&quot;:0,&quot;335559738&quot;:0,&quot;335559739&quot;:0,&quot;335559740&quot;:252}">&nbsp;</span></li> </ul> <ul> <li data-leveltext="·" data-font="Symbol" data-listid="5" data-list-defn-props="{&quot;335551500&quot;:2448933,&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;·&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}" data-aria-posinset="12" data-aria-level="1"><span data-contrast="none">Willing to join incident response for application and API security.</span><span data-ccp-props="{&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;201341983&quot;:0,&quot;335559738&quot;:0,&quot;335559739&quot;:0,&quot;335559740&quot;:252}">&nbsp;</span></li> </ul> <ul> <li data-leveltext="·" data-font="Symbol" data-listid="5" data-list-defn-props="{&quot;335551500&quot;:2448933,&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;·&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}" data-aria-posinset="13" data-aria-level="1"><span data-contrast="none">Willing to travel overseas occasionally when the role requires it.</span><span data-ccp-props="{&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;201341983&quot;:0,&quot;335559738&quot;:0,&quot;335559739&quot;:0,&quot;335559740&quot;:252}">&nbsp;</span></li> <li data-leveltext="·" data-font="Symbol" data-listid="5" data-list-defn-props="{&quot;335551500&quot;:2448933,&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;·&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}" data-aria-posinset="14" data-aria-level="1"><span data-contrast="none">Clear and effective written and verbal communication in English</span><span data-ccp-props="{&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;201341983&quot;:0,&quot;335559738&quot;:0,&quot;335559739&quot;:0,&quot;335559740&quot;:252}">&nbsp;</span></li> </ul> <p><strong><span data-contrast="none">Bonus&nbsp;Points</span></strong><span data-ccp-props="{&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559685&quot;:0,&quot;335559739&quot;:120,&quot;335559740&quot;:252}">&nbsp;</span></p> <ul> <li data-leveltext="·" data-font="Symbol" data-listid="5" data-list-defn-props="{&quot;335551500&quot;:2448933,&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;·&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}" data-aria-posinset="15" data-aria-level="1"><span data-contrast="none">Experience securing AI agents, sandboxed code execution environments, or systems where AI-generated output can trigger automated actions.</span><span data-ccp-props="{&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;201341983&quot;:0,&quot;335559738&quot;:240,&quot;335559739&quot;:240,&quot;335559740&quot;:252}">&nbsp;</span></li> </ul> <ul> <li data-leveltext="·" data-font="Symbol" data-listid="5" data-list-defn-props="{&quot;335551500&quot;:2448933,&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;·&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}" data-aria-posinset="16" data-aria-level="1"><span data-contrast="none">Has run a vulnerability disclosure programme.</span><span data-ccp-props="{&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;201341983&quot;:0,&quot;335559738&quot;:240,&quot;335559739&quot;:240,&quot;335559740&quot;:252}">&nbsp;</span></li> <li data-leveltext="·" data-font="Symbol" data-listid="5" data-list-defn-props="{&quot;335551500&quot;:2448933,&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;·&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}" data-aria-posinset="17" data-aria-level="1"><span data-contrast="none">Security certifications with application-security depth, such as CSSLP or OSWE.</span><span data-ccp-props="{&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;201341983&quot;:0,&quot;335559738&quot;:240,&quot;335559739&quot;:240,&quot;335559740&quot;:252}">&nbsp;</span></li> </ul> <p><span data-contrast="none"><span data-ccp-parastyle="No Spacing">LOCATION</span></span><span data-ccp-props="{&quot;335551550&quot;:6,&quot;335551620&quot;:6}">&nbsp;</span></p> <p><span data-contrast="none"><span data-ccp-parastyle="No Spacing">Singapore</span><span data-ccp-parastyle="No Spacing">&nbsp;or&nbsp;</span><span data-ccp-parastyle="No Spacing">Australia</span></span><span data-ccp-props="{&quot;335551550&quot;:6,&quot;335551620&quot;:6}">&nbsp;</span></p><p>Find more <a href="https://www.arbeitnow.co.uk/english-speaking-jobs">English Speaking Jobs in United Kingdom</a> on Arbeitnow</a>