Product & Application Security Engineer

Veeam Software is the Data and AI Trust Company, specializing in data resilience and security. They are seeking a Senior Security Engineer to ensure security is integrated throughout the software development lifecycle, partnering with engineering teams to design secure features and address vulnerabilities.

Responsibilities:

• Triage and fix security alerts from tools like Grype, Cycode, and Wiz
• Implement code fixes for security tech-debt across our stack
• Conduct Threat Modeling sessions for upcoming epics and features in our two-week sprint cycles
• Serve as a Subject Matter Expert on Kubernetes security primitives (RBAC, unprivileged containers, network policies) for the engineering team, owning metrics and definition of success, share best practices through workshops, reviews, and documentation
• Lead audits, incidents, and compliance reviews representing the engineering team with the wider security community in Veeam

Requirements:

• You are a competent developer in Go (Golang) and have exposure to modern frontend frameworks like Vue.js
• You've worked extensively with Kubernetes and understand its security primitives
• You have experience integrating security into the early stages of the Software Development Life Cycle
• Experience with modern AppSec and Supply Chain tools (specifically Grype, Cycode, and Wiz) is a strong plus
• You can balance theoretical security perfection with the practical reality of shipping software on a continuously frequent basis