Join the Cyber Security Team at Kraken Technologies as a Security Engineer, playing a crucial role in securing software development processes and shaping a culture of security in an AWS-focused, agile engineering organization. You will build security services, harden infrastructure, and improve security posture, and respond to security incidents.

As a Senior Software Security Engineer, you will play a critical role in shaping and executing our application and infrastructure security posture, driving secure-by-design practices, threat modeling, and proactive risk mitigation within engineering. This is a hands-on role for someone passionate about building secure systems and influencing security culture across a fast-paced fintech startup.

Reporting to the Director, Application Security, you will work with software engineers and leadership to address security risks and provide mitigation recommendations within the Secure Development Lifecycle (SDLC). Collaborate with development teams to understand their needs, assess risks, and customize solutions. Implement and manage security tools (SAST, SCA, DAST) and integrate solutions into CI/CD pipelines. Review applications against common flaws (e.g., OWASP Top 10) and provide visibility to senior management.

As a Senior Application Security Engineer, you will ensure the security and integrity of our systems and data by collaborating on security projects, identifying risks, and implementing security measures. You will maintain a secure environment by monitoring vulnerabilities, responding to incidents, and conducting audits; you will also mentor team members on security best practices.

As an Application Security Engineer, you will perform application security testing on web applications, mobile applications, microservices, infrastructure code, and open source code in order to expose weaknesses. You will work closely with development teams and recommend steps for the remediation of identified vulnerabilities. You will educate development engineers on secure coding practices and contribute to overall application security awareness.