Senior Application Security Engineer

About the role

Malwarebytes is looking for a Senior Application Security Engineer with substantial experience securing Windows applications to join its AppSec team. You will use modern tools to identify, triage and resolve security issues in close partnership with development teams, manage the bug bounty program and focus primarily on Windows application security, while also contributing to macOS, iOS and Android security as needed.

Key responsibilities

• Automate security processes and tooling in the CI/CD pipeline, including SAST, DAST and SCA tools
• Manage collaboration with external firms on code reviews and penetration tests, triage results and advise teams on severity and resolution
• Support product and development teams on application security, including threat modeling and design reviews
• Administer and support the bug bounty program and security tools, and work with external researchers and the platform vendor
• Validate reported vulnerabilities and verify that fixes adequately mitigate the risks
• Promote security best practices and foster a secure development culture

Required profile

• Experience securing Windows desktop applications and hands-on bug bounty program management
• Software development skills in C, C++, C# or Java, and experience securing cloud, desktop and mobile applications
• Able to work independently in high-risk environments with minimal supervision
• Excellent written and verbal communication, able to explain complex security topics to technical and non-technical audiences

Required skills

• SAST, DAST and SCA tooling
• GitHub, GitHub Actions and GitHub Advanced Security
• Code review and security analysis of desktop applications
• Nice to have: red teaming, CISSP/CEH/GIAC certifications, AWS and Terraform, macOS/iOS/Android security, digital forensics, security architecture and networking

What we offer

• Annual compensation of 70,000 to 87,000 EUR depending on location, experience and interview performance
• Medical, dental and vision insurance, wellness programs and comprehensive time off
• Employee referral bonus program