Very Good Security

Very Good Security

VGS is the global leader in payment tokenization, providing security and compliance infrastructure for banks, fintechs, and merchants to manage payment data complexities and accelerate PCI, SOC2, and more compliances.

Internet Software & Services
51-250
Founded 2015
$45M raised

Description

  • Integrate SAST, DAST, and SCA tooling into GitHub/GitLab CI/CD pipelines.
  • Design, communicate, and maintain Secure SDLC processes, frameworks, and threat-modeling practices.
  • Manage the private bug bounty program, including budget tracking, report triage, and reducing mean time to mitigation.
  • Conduct threat modeling and secure code reviews for Java and Python microservices.
  • Deliver secure-coding training and develop a Security Champions network across Engineering.
  • Partner with communications teams on technical blogs and vulnerability disclosures.
  • Collaborate across Security and Engineering to establish developer-friendly security guardrails.

Requirements

  • 3–5+ years of dedicated Application Security and/or full-stack development experience.
  • Experience performing secure code assessments for Java and Python applications.
  • Experience integrating SAST/DAST tools such as GitHub Advanced Security, ZAP/Burp, Synopsys/Veracode, and Semgrep into CI/CD systems.
  • Hands-on experience operating bug bounty programs and defining program metrics and KPIs.
  • Practical experience applying threat-modeling frameworks such as STRIDE to complex systems.
  • Strong communication skills and experience building trust across engineering teams.
  • BA/BS degree preferred.
  • Experience with cloud-native, high-growth, or pre-IPO fintech startups preferred.
  • Hands-on experience with AWS security controls and cloud infrastructure preferred.
  • Comfort working in a fully remote, globally distributed environment preferred.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Senior Product Security Engineer

Harness.io 251-1K Internet Software & Services

Harness is hiring a Senior Product Security Engineer to secure its AI-powered software delivery platform by identifying vulnerabilities, building security tooling, and embedding secure practices across the software development lifecycle.

AWS Azure CI/CD DevSecOps GCP Java Kubernetes OWASP Penetration Testing REST API
4 hours, 54 minutes ago

Product Security Engineer

Gomining 11-50 Construction & Engineering

Product Security Engineer partnering with engineering, Platform, and DevOps teams to secure applications, cloud infrastructure, APIs, and the software development lifecycle as the platform scales.

AWS Azure Blockchain CI/CD Docker GCP Kubernetes Microservices Penetration Testing REST API Secrets Management
4 hours, 54 minutes ago

Analista de Seguridad de Aplicaciones Mid

Coforge 10K-50K IT Services

Coforge busca un Analista Mid de Seguridad de Aplicaciones para analizar y fortalecer la seguridad de APIs, aplicaciones web y código durante el ciclo de desarrollo de software, en modalidad remota desde Lima, Perú.

Azure Git GitHub
1 day, 4 hours ago

Security Engineer II, Application Security

Trail of Bits 51-250 Internet Software & Services

Trail of Bits is hiring a remote U.S.-based Security Engineer II to conduct hands-on application security assessments, discover and validate vulnerabilities, build custom tooling, and deliver actionable findings to clients.

Ansible C C++ Cybersecurity Go Helm JavaScript Kubernetes Python Rust Terraform TypeScript
1 day, 4 hours ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers