Similar Jobs
See allProduct Security Engineer
Close
Global
Application Security
Python
TypeScript
Security Engineer
Rain
TypeScript
Go
Rust
Staff Engineer - Security
SpinQuest
US
Application Security
TypeScript
Node.js
Application Security Engineer (Contractor)
Radicle Health
US
Scripting
OWASP
Threat Modeling
Senior Application Security Engineer
G-P
UK
Application Security
Threat Modeling
Penetration Testing
About the Team:
- WW (WeightWatchers) helps millions of members build healthier habits through science-backed weight management, clinical care and community.
- Platform Security is moving from a compliance-driven program to an engineering-driven one, building detection and response, cloud and application security.
What You'll Do:
- Run continuous offensive testing against TypeScript applications, APIs and AWS infrastructure using hands-on techniques and AI agent-driven workflows.
- Write and ship remediation PRs and guardrails that prevent bug classes from recurring.
- Help run and improve SAST, DAST, SCA, bug bounty and AI-assisted security tooling.
Who You Are:
- 6+ years in security or software engineering, with 3+ years of hands-on offensive work (pentesting, red/purple team, or application security testing).
- Hands-on offensive experience in AWS, production software engineering in TypeScript/Node.js, and deep knowledge of web and API vulnerabilities.
- Experience with Burp Suite, scripting custom tooling, and solid understanding of OAuth 2.0/OIDC and session management.
Weight Watchers
Weight Watchers is the global leader in science-backed weight management, offering an integrated support system that combines scientific expertise, medication, technology, and human connection. With over 60 years of experience and a team of about 1000+ employees, they foster a diverse and inclusive culture focused on healthy habits.