Security Engineer (Remote - Worldwide)
A fast-growing business intelligence software company with open source roots is hiring a security engineer to work inside its core engineering team. The role is hands-on: you will combine source code analysis and offensive research with engineering work to find vulnerabilities, build fixes, and make the product and its dependencies secure by default. You will influence security decisions from early design through release and adoption.
What you'll do
- Partner with engineers during feature development, contributing security input on design, implementation, release, and rollout.
- Build security-focused features and lead codebase-wide security improvements, implementing fixes that address root causes.
- Evaluate and apply advanced AI tools to scale code analysis, vulnerability research, and secure engineering practices.
- Conduct offensive research on the product, write proofs of concept, and validate vulnerabilities.
- Judge findings by exploitability and real-world impact, set remediation criteria, and verify that fixes work.
- Turn individual findings into broader changes that prevent whole classes of vulnerabilities.
What you need
- Proven track record of finding and exploiting application vulnerabilities through source code review and hands-on research.
- Ability to work independently in unfamiliar codebases and reason about runtime behavior and trust boundaries.
- Solid experience with authentication, authorization, injection, and unsafe handling of untrusted input.
- Clear judgment on exploitability and impact, and the ability to explain findings and remediation options in writing.
- Strong software engineering skills to build durable fixes; experience with Clojure preferred, or a strong willingness to learn it.
- Careful, critical use of AI-assisted security tooling, with independent validation of its output.
Open to applicants anywhere in the world.
How to apply
Sign up free on i'llTip to see the employer's details and apply. i'llTip's AI can tailor your résumé to this job, and you'll get alerts for similar roles.
Apply on i'llTipGet the Android appGet the iPhone appMore Cybersecurity & Data Protection jobs
Cybersecurity Engineer (Remote - US only)
This is a remote cybersecurity role with a UX research technology company that sells a SaaS platform to large consumer and enterprise brands. You will join the cybersecurity team, reporting to the VP of Compliance and In…
Senior SOC Analyst
This is a senior, onsite role in Lagos for an experienced security professional who will lead day-to-day security monitoring and incident response. The work centres on spotting and investigating cyber threats, strengthen…
Senior Infrastructure Security Engineer (Remote - Americas and EMEA)
The employer does not permit permanent work from a number of countries, so confirm your country is eligible before applying. A fast-growing, remote-first software company is hiring a senior engineer to help maintain and …
GRC Analyst (Remote - Worldwide)
Candidates can apply from any country. This role sits within the compliance and security team of a fast-growing developer tools company with a fully remote, globally distributed workforce. You will help make risk managem…
Cyber Security Analyst
A remote, full-time role for a Cyber Security Analyst with a business and technology education organisation. The analyst will protect digital systems, networks and information from cyber threats, monitoring security even…