Senior Security Engineer - (Offensive)

SonarSource • Austin, TX

71d • Remote

About The Position

Sonar helps prevent code quality and code security issues from reaching production, amplifies developers' productivity in concert with AI assistants, and improves the developer experience with streamlined workflows. Sonar analyzes all code, regardless of who writes it - your internal team, genAI, or third parties - resulting in more secure, reliable, and maintainable applications. Rooted in the open source community, Sonar's solutions support over 30 programming languages, frameworks, and infrastructure technologies. Today, Sonar is used by +7M developers and 400K organizations worldwide, including the DoD, Microsoft, NASA, MasterCard, Siemens, and T-Mobile. We believe in developing great products that are supported by great internal teams and a strong culture. We are highly committed to and obsessed with the company, users, each other, and our open source community. We have high standards and hold each other accountable for acting with positivity, dedication, thoughtfulness, empathy, and passion daily. We are deliberate with our decisions with high clarity of intention. At the same time, we feel extreme urgency and move forward quickly. And lastly, we are highly effective and operationally efficient. We operate collectively as One Team to accomplish our goals. At Sonar, CODE is more than just an acronym - it's a mindset that defines daily operations.

Requirements

• Extensive experience with cloud architectures, primarily AWS.
• Extensive experience with application security assessments including authN and authZ.
• Extensive experience with pen testing, red team engagements and bug bounty programs.
• Experience with vulnerability investigation and management.
• Experience with AI Security.
• Experience with threat modeling using frameworks like STRIDE.
• Experience with cloud network and firewall policy management.
• Experience with coding and scripting such as python, bash.
• Familiarity with Azure and GCP platforms, and Google Workspace are a plus.

Responsibilities

• Collaborate with product engineering teams to design and implement secure solutions.
• Review product architectures and solutions to ensure integration of security requirements.
• Review cloud configuration and perform code reviews.
• Develop and implement security initiatives delivered through the strategic security plan.
• Procure, design, and implement new security tools or features.
• Conduct internal and external security reviews, pen testing, and red team exercises.
• Investigate and resolve security issues detected in products and internal systems.
• Investigate and manage customer security concerns.
• Act as a security SME for security incidents.
• Review threat intelligence findings and analyse threat landscapes.

Benefits

• Flexible comprehensive employee benefit package.
• 23 days of PTO per calendar year (on a pro-rated basis depending on your employment start date), with additional time provided for sickness, life events and holidays.
• 401(k) plan that has a 4% match, fully vested on day one of participation.
• Generous discretionary Company Growth Bonus, paid annually.
• Fully paid parking in the heart of downtown Austin, Texas.
• Global workforce with employees in 20+ countries representing 35+ unique nationalities.
• Annual kick-off somewhere in the world to build relationships and goals for the company.
• Monthly catered events, and team events.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Industry: Publishing Industries
• Number of Employees: 501-1,000 employees