NMK Global Inc. is a global IT Services & Solutions company specializing in IT Staffing, Technology Consulting, Workforce Solutions, and Application Development Services. We help organizations build high-performing technology teams by connecting them with exceptional talent across a wide range of industries. Our expertise, industry knowledge, and consultative approach enable clients to achieve successful business outcomes while helping professionals advance their careers.
Job Description:
The pod will work as the operational bridge between automated security scanning/remediation systems and Google’s product code owners. The team will focus on threat modeling, vulnerability triage, exploitability validation, automated patch verification, and driving security issues through production closure.
Experience with trust boundaries, attack surfaces, data flows, STRIDE/PASTA, and distributed or microservice architectures.
Strong knowledge of CWE, CVE, OWASP Top 10, severity classification, vulnerability scoring, remediation SLAs, and scanner findings.
Hands-on coding experience in at least two languages: C++, Go, Java, or Python. Must be able to build test harnesses, mock dependencies, create PoCs, and validate vulnerabilities versus false positives.
Strong secure code-review skills, automated patch validation, unit and integration testing, regression identification, and experience reviewing AI/agent-generated code fixes.
Experience coordinating with product code owners, tracking remediation SLAs, supporting code reviews and deployments, and verifying production closure.
NMK Global Inc. is an Equal Opportunity Employer. We are committed to creating an inclusive workplace and consider all qualified applicants without regard to age, race, color, religion, sex, national origin, disability, protected veteran status, sexual orientation, gender identity, or any other characteristic protected by applicable law.
