EarnIn

Security Engineer

• Lead and evolve the vulnerability management program: define short- and long-term goals, establish processes, and build and maintain metrics and reporting.
• Manage day-to-day program operations: triage findings, file and track tickets, respond to questions, evaluate solutions, and drive remediation progress.
• Partner with engineering teams to review security weaknesses, balancing risk, technical constraints, and business impact, while providing authoritative secure development guidance to ensure solutions are practical and effective.
• Lead security architecture reviews and guide engineering teams and security champions in completing threat modeling exercises.
• Support the bug bounty program, including triage of submissions, coordination with researchers, and integration into the vulnerability management workflow.
• Stay current on the evolving vulnerability landscape, including new classes of application, dependency, and infrastructure issues.
• Contribute to security best practices, guidelines, documentation, and training.

Product Security Engineer