HighLevel

HighLevel

HighLevel provides an all-in-one sales and marketing platform that agencies can white label and resell, offering tools and resources designed to help businesses consolidate their marketing efforts and achieve their growth objectives.

Internet Software & Services
251-1K
Founded 2018
$60M raised

Description

  • Perform and lead manual and automated penetration testing across applications, APIs, and cloud services.
  • Drive threat modeling and secure architecture reviews across application and infrastructure layers.
  • Collaborate with Infra/DevOps on cloud network architecture, including VPC design, security groups, routing, and segmentation.
  • Design and advise on cloud-native security controls such as IAM hardening, role boundaries, secrets management, and least privilege.
  • Evaluate and improve Kubernetes and container security posture across runtime, image, and network layers.
  • Implement secure-by-default patterns across the SDLC, CI/CD, and Infrastructure-as-Code.
  • Monitor emerging threats, CVEs, and vulnerabilities relevant to the web, cloud, and infrastructure stack.
  • Influence internal security tooling, automation pipelines, and security review processes.
  • Serve as a security advisor to engineering, SRE, and product teams on key projects.

Requirements

  • 8+ years of total experience in Application Security, Security Engineering, or Penetration Testing roles.
  • Strong hands-on experience with threat modeling, secure architecture reviews, and penetration testing.
  • Familiarity with OWASP Top 10, STRIDE, and modern security frameworks.
  • Experience with tools such as Burp Suite, ZAP, Snyk, Metasploit, and Semgrep.
  • Ability to read and analyze code in JavaScript, Go, PHP, or Node.js.
  • Working knowledge of cloud security principles, preferably AWS.
  • Experience with multi-tenant SaaS platforms or white-labeled architectures is preferred.
  • Familiarity with network-level security concepts such as VPC design, IAM, and zero-trust networks is preferred.
  • Exposure to container security, including Docker and Kubernetes, is preferred.
  • Hands-on experience with IaC security and CI/CD pipelines such as GitHub Actions and Terraform is preferred.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Senior Software Engineer (SRE), Infrastructure Security

MongoDB 1K-5K Internet Software & Services

MongoDB is hiring an Infrastructure Security Engineer to build automated security infrastructure and controls that protect MongoDB Atlas across AWS, Azure, and Google Cloud.

Ansible AWS Azure C C++ CloudFormation Go Kubernetes Linux Python Rust Terraform
7 hours, 1 minute ago

Senior Security IAM Engineer

Scopely 1K-5K Internet Software & Services

Scopely is hiring a Senior IAM Security Engineer for its Information Security team to build and secure scalable identity and access systems across cloud, SaaS, AI, and remote-access environments.

AWS Bash CI/CD GCP Git OAuth OpenID Connect PowerShell Python SAML Terraform
2 days, 5 hours ago

Senior Cloud Security Engineer

Xebia 1K-5K Internet Software & Services

As a Cloud and Application Security specialist at Xebia, you will strengthen security across Azure, hybrid infrastructure, applications, and development processes for clients and internal teams.

Azure CI/CD DevSecOps GitHub Actions .NET Penetration Testing Terraform
2 days, 6 hours ago

IT Security & Compliance Lead (Amsterdam, NLD)

B Lab 51-250 Diversified Consumer Services

B Lab is seeking a full-time IT Security & Compliance Lead in Amsterdam to establish consistent security governance, compliance, and risk management across its consolidating global network.

Cybersecurity Penetration Testing Salesforce
3 days, 6 hours ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers