Revizto

Application Engineer

• Play a key role in advancing and maturing our application security program by establishing secure development standards and embedding security throughout the entire software development lifecycle (SDLC)
• Work closely with development, DevOps, and DevSecOps teams to ensure security is integrated from the outset
• Managing vulnerabilities (keeping stuff patched and secure)
• Checking open-source code for security issues (OSA / SCA)
• Doing and improving code security reviews
• Hardening API security (REST, GraphQL)
• Doing threat modeling (STRIDE, PASTA, etc.) for new features
• Launching and running the bug bounty program!
• Building a "Security Champions" program across the engineering teams
• Working with external teams on penetration tests
• Sharing your security knowledge with everyone

Senior Application Security Engineer