Senior Cloud & Mobile Security Engineer

About this task

Responsibilities:
- Assess new cloud designs and mobile application feature changes for potential security vulnerabilities.
- Evaluate production and test builds of cloud services and mobile applications for adherence to security best practices.
- Develop product security guidelines based on industry standards.
- Triage reported vulnerabilities and determine their impact, priority, and risk.
- Design and build secure cloud services that centralize critical security functionality.
- Implement test frameworks for automated security validation of cloud and mobile deployments.
- Use SAST and DAST tools to identify and report flaws and vulnerabilities to development teams.
- Ensure components meet applicable regulatory requirements in each market.
- Engage third-party services for penetration testing, red-team exercises, and threat modeling.

Requirements:
- 7+ years of experience designing, building, and deploying AWS-based managed-service infrastructure, including at least 2 years as a security champion within a development team.
- Extensive practical experience designing, building, and deploying secure serverless, API-based services.
- Deep understanding of managed-service call flows, including gateways, work processes, storage, and access.
- Deep knowledge of authentication protocols and technologies, including IAM, SSO, OAuth 2.0, and RBAC.
- Experience building mobile applications for iOS and Android and knowledge of each platform's security best practices.
- Understanding of and alignment with OWASP standards and best practices, including the OWASP Top Ten.