HighLevel

HighLevel

HighLevel provides an all-in-one sales and marketing platform that agencies can white label and resell, offering tools and resources designed to help businesses consolidate their marketing efforts and achieve their growth objectives.

Internet Software & Services
251-1K
Founded 2018
$60M raised

Description

  • Perform and lead manual and automated penetration testing across applications, APIs, and cloud services.
  • Drive threat modeling and secure architecture reviews across application and infrastructure layers.
  • Collaborate with Infra/DevOps on cloud network architecture, including VPC design, security groups, routing, and segmentation.
  • Design and advise on cloud-native security controls such as IAM hardening, role boundaries, secrets management, and least privilege.
  • Evaluate and improve Kubernetes and container security posture across runtime, image, and network layers.
  • Implement secure-by-default patterns across the SDLC, CI/CD, and Infrastructure-as-Code.
  • Monitor emerging threats, CVEs, and vulnerabilities relevant to the web, cloud, and infrastructure stack.
  • Influence internal security tooling, automation pipelines, and security review processes.
  • Serve as a security advisor to engineering, SRE, and product teams on key projects.

Requirements

  • 8+ years of total experience in Application Security, Security Engineering, or Penetration Testing roles.
  • Strong hands-on experience with threat modeling, secure architecture reviews, and penetration testing.
  • Familiarity with OWASP Top 10, STRIDE, and modern security frameworks.
  • Experience with tools such as Burp Suite, ZAP, Snyk, Metasploit, and Semgrep.
  • Ability to read and analyze code in JavaScript, Go, PHP, or Node.js.
  • Working knowledge of cloud security principles, preferably AWS.
  • Experience with multi-tenant SaaS platforms or white-labeled architectures is preferred.
  • Familiarity with network-level security concepts such as VPC design, IAM, and zero-trust networks is preferred.
  • Exposure to container security, including Docker and Kubernetes, is preferred.
  • Hands-on experience with IaC security and CI/CD pipelines such as GitHub Actions and Terraform is preferred.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Senior Cloud Security Engineer - AI Resilience & Security Enhancements (Fixed-term contract)

Form3 251-1K Diversified Financial Services

Form3 is hiring a Senior Cloud Security Engineer on a 12-month fixed-term contract to deliver cloud security, resilience, and governance improvements across its cloud-native payments platform.

AWS CI/CD Kubernetes Terraform
3 hours ago

Senior Security Engineer (Infrastructure)

Chainguard 51-250 Internet Software & Services

Chainguard is hiring a Senior Security Engineer to secure and evolve the multi-cloud infrastructure powering its open-source security product and AI-driven workflows.

AWS Azure CI/CD Kubernetes Terraform
3 hours, 45 minutes ago

Staff CorpSec Engineer

Turing 251-1K Internet Software & Services

Turing is seeking a Staff Corporate Security Engineer to lead hands-on security for its employee devices, identities, SaaS applications, and corporate network while establishing scalable protections for its growing AI-focused organization.

Go Linux macOS OpenID Connect Python SAML
4 hours, 15 minutes ago

DevSecOps Engineer

Raya 51-250 Internet Software & Services

Raya is hiring a DevSecOps Engineer to evolve its multi-regional infrastructure platform, delivering secure, reliable, scalable systems that enable product engineering teams to innovate confidently.

Ansible AWS Azure Bash CI/CD Datadog Docker Elasticsearch GCP Go Grafana Kubernetes MongoDB Network Security Node.js PostgreSQL Prometheus Pulumi Python Redis Ruby Terraform
1 day, 3 hours ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers