Harness.io

Harness.io

Harness.io offers an AI-driven software delivery platform that enhances DevOps practices through continuous integration and delivery (CI/CD), feature flags, chaos engineering, and cloud cost management, enabling organizations to automate and streamline...

Internet Software & Services
251-1K
Founded 2016
$425M raised

Description

  • Design and develop product security APIs, tools, and utilities.
  • Conduct threat modeling and secure design reviews for backend services and integrations.
  • Perform penetration testing and adversarial simulations across products, APIs, and code.
  • Lead manual and automated code reviews to identify vulnerabilities and insecure patterns.
  • Implement and operate SAST, DAST, and SCA tools within CI/CD pipelines.
  • Advise engineering and product teams on security standards, architecture, and remediation.
  • Assess security risks and recommend solutions for authentication, authorization, and other product security features.
  • Create and implement technical security standards across global engineering teams.
  • Integrate vulnerability management and other security processes into the software development lifecycle.
  • Partner with Engineering and Product to deliver software with security by design.

Requirements

  • Bachelor’s degree in Computer Science or a related field.
  • 5+ years of relevant industry experience focused on security.
  • Experience with DevSecOps and secure software development lifecycle methodologies.
  • Knowledge of OWASP, SANS, NIST, and CIS security frameworks.
  • Understanding of software supply chain risks and secure SDLC practices.
  • Experience with cloud or cloud-native environments, including Kubernetes, AWS, GCP, or Azure.
  • Knowledge of enterprise applications, API development, and modern software delivery processes.
  • Proficiency in Java or a comparable object-oriented programming language.
  • Hands-on experience with security testing tools and vulnerability management workflows.

Benefits

  • Salary range of $150,000–$200,000 USD.
  • Opportunity to work with a global team across 26 offices and 27 countries.
  • Work on AI-driven software security and delivery technologies at a rapidly growing company.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Application Security Engineer

Very Good Security 51-250 Internet Software & Services

VGS is hiring an Application Security Engineer to build a developer-focused security program for its global payment tokenization platform, improving application security throughout the software development lifecycle.

AWS Burp Suite CI/CD GitHub GitLab Java Microservices Python
3 hours, 32 minutes ago

Product Security Engineer

Gomining 11-50 Construction & Engineering

Product Security Engineer partnering with engineering, Platform, and DevOps teams to secure applications, cloud infrastructure, APIs, and the software development lifecycle as the platform scales.

AWS Azure Blockchain CI/CD Docker GCP Kubernetes Microservices Penetration Testing REST API Secrets Management
4 hours, 17 minutes ago

Analista de Seguridad de Aplicaciones Mid

Coforge 10K-50K IT Services

Coforge busca un Analista Mid de Seguridad de Aplicaciones para analizar y fortalecer la seguridad de APIs, aplicaciones web y código durante el ciclo de desarrollo de software, en modalidad remota desde Lima, Perú.

Azure Git GitHub
1 day, 3 hours ago

Security Engineer II, Application Security

Trail of Bits 51-250 Internet Software & Services

Trail of Bits is hiring a remote U.S.-based Security Engineer II to conduct hands-on application security assessments, discover and validate vulnerabilities, build custom tooling, and deliver actionable findings to clients.

Ansible C C++ Cybersecurity Go Helm JavaScript Kubernetes Python Rust Terraform TypeScript
1 day, 4 hours ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers