Staff Engineer Security Platform Development
You will own the build-out of security engineering and DevSecOps capabilities by designing security products, platform services, SDKs, and agents that embed protection throughout the software lifecycle. You will lead runtime protection, integrate security scanning, address application vulnerabilities, apply AI to security engineering, and drive security standards and remediation across engineering teams.
Responsibilities
- Architect and build an end-to-end DevSecOps platform
- Build SDKs and agents for security products
- Lead runtime protection using RASP and Java Agent technologies
- Integrate SAST, DAST, IAST, SCA, code scanning, and image scanning into CI/CD
- Design detection, remediation, hardening, and countermeasures for application and API vulnerabilities
- Apply LLMs and AI Agents to vulnerability analysis and security automation
- Drive security standards, onboarding specifications, release gates, risk tiering, and remediation mechanisms
- Partner across engineering, architecture, SRE, QA, and business teams
Requirements
- Strong computer science and security fundamentals
- Expert-level Java and JVM experience
- Experience with Java Agents, ASM, ByteBuddy, bytecode instrumentation, and performance tuning
- Working proficiency in Python or Go
- Production experience with RASP, SAST, DAST, IAST, SCA, image security, and code scanning
- Offensive and defensive application security experience
- Fluency with LLMs and AI Agents
- Experience designing and delivering security products, platform modules, and SDKs or agents
- Exceptional ownership and cross-team communication
Benefits
- L&D programs
- Education subsidy
- Team building programs
- Company events
- Wellness allowances
- Meal allowances
- Comprehensive healthcare schemes for employees and dependants