Senior Staff Engineer Security Platform Development
You will lead development of security engineering and DevSecOps capabilities, including security products, platforms, SDKs, and Agents. You will develop Java runtime protection, integrate security scanning into CI/CD, address application vulnerabilities, apply AI to security workflows, and drive security governance across engineering teams.
Responsibilities
- Lead architecture and development of the DevSecOps platform and security products
- Develop SDKs and Agents for code, build, artifact, image, deployment, and runtime security
- Design and develop RASP and Java Agent runtime protection
- Implement bytecode enhancement, runtime hooks, and detection and blocking engines
- Integrate security scanning into CI/CD workflows
- Build scanning, gating, remediation, and re-validation processes
- Develop application security protections for web, API, and microservice vulnerabilities
- Apply LLMs and AI Agents to vulnerability analysis and security automation
- Drive security standards, integration rules, quality gates, and remediation workflows
- Collaborate with stakeholders to deliver scalable security capabilities
Requirements
- Computer Science
- Operating systems
- Networking
- Compilers
- JVM internals
- Distributed systems
- Application security
- Cloud-native security
- Software supply-chain security
- Java
- ClassLoader
- Java Agent
- ASM
- ByteBuddy
- Bytecode instrumentation
- Profiling
- Performance tuning
- Python
- Golang
- RASP
- SAST
- DAST
- IAST
- SCA
- Image security
- Code security scanning
- Vulnerability analysis
- Penetration testing
- LLM
- AI Agents
- Security governance
Benefits
- L&D programs
- Education subsidy
- Team building programs
- Company events
- Wellness allowances
- Meal allowances
- Healthcare schemes for employees and dependants