Security Engineer II

Spotnana is seeking a Security Engineer II to join its global Security team. The role focuses on application security, including improving the secure SDLC, owning API security and penetration testing processes, identifying vulnerabilities, supporting incident response, and collaborating with engineering, product, and compliance teams.

Responsibilities:

• Conduct application level security assessments (threat modeling, code reviews, penetration testing) of both internal tools and external Spotnana web and mobile applications
• Provide supporting guidance for bug-fixes on issues found through various channels (customer reported, internal testing, tools, external pen tests etc)
• Incorporate AI tools to accelerate our ability to detect and address application security vulnerabilities
• Develop API Security best practices
• Implement SAST, DAST, RAST, IAST and related tools to identify security bugs earlier in the release cycle
• Deliver training and awareness forR&D on security issues
• Be part of incident response team where application level context and triage is necessary to contain an issue
• Collaborate with security compliance functions to align technical controls with compliance requirements

Requirements:

• 3+ years of  previous web and mobile application security assessment experience
• Experience securing Java-based, API -driven microservices deployed in a cloud environment
• Experience with React (JS) for frontend and Java for backend services
• Previous experience implementing secure SDLC practices, and automations such as SAST, DAST, RAST, IAST in at least medium scale software development organizations
• Ability to write code in one or more programming languages
• Candidates must be legally authorized to work in the United States and must not require current or future employment sponsorship