Senior Software Engineer (Application & Cloud Security)

About this role

• As a Senior Software Engineer specializing in Application Security in Hypori’s Product & Engineering organization, you enable software engineering teams to continuously improve the security posture of our products and operational SaaS environments
• You combine hands-on AppSec and DevSecOps expertise – integrating security tooling in CI/CD pipelines, developing security patterns, and serving as a subject matter expert for the secure development and deployment of containerized microservices, cloud infrastructure, and other product components
• Maintain a deep understanding of the security aspects of Hypori’s product/system architecture and implementation patterns; collaborate with engineering teams on threat models; participate in design and architecture reviews; and engage across scrum teams to surface and address application security, privacy, and compliance concerns
• Be the go-to AppSec expert for software engineering, security, and compliance teams. Mentor engineers on application security principles, secure design patterns, and secure coding practices; grow security capability and awareness through thought leadership and active engagement
• Develop and maintain software security patterns to enable security/compliance/privacy-by-default engineering, such as: secure coding and configuration standards, code snippets/templates for Infrastructure as Code, hardening of containerized applications, etc
• Lead automation and integration of vulnerability management tooling – including SAST, DAST, and SCA tools – across artifact repositories, container registries, and other components of development and build pipelines
• Perform security-focused code reviews on request, providing targeted guidance on security-sensitive components and implementation decisions
• Triage vulnerability and compliance testing results for technical implications, validate their applicability, determine exposure in a system/component context, and generate user stories for remediation efforts
• C...