Senior Software Engineer - Security

We are looking for a Security Engineer to join the AWC team. In this role, you will take ownership of security engineering for critical components of our platform. You will work independently to research, design, and implement security features while providing expertise to the broader engineering organisation.

Responsibilities:

• Independently research, design, and implement new security features and framework changes for the AWC platform.
• Perform threat modelling, risk assessments, and vulnerability detection/analysis on applications and related libraries.
• Write and review secure code (Go/Rust/Java), ensuring adherence to security standards.
• Work with multiple teams on application architecture, providing expert advice to developers and support to field teams regarding security issues.
• Mentor junior engineers and participate in the hiring process (interviewing) to help grow the team.
• Research industry developments and evolving threats to continuously harden the platform.

Requirements:

• Bachelor's degree with 2+ years of experience in software or security engineering.
• 4+ years of programming experience with Java/Go/Rust.
• Deep familiarity with security topics including PKI, TLS, LDAP, JWT, OIDC, SAML, and cryptography including symmetric/asymmetric encryption, digital signatures, and hashing.
• Familiarity with security standards such as FIPS 140-3 FedRAMP, OWASP, etc. a plus.
• Proven experience identifying and mitigating security vulnerabilities (CVE analysis, etc. ).
• Familiarity with OWASP Top 10 risks and mitigations.
• Experience building and securing large, web-scale distributed systems.
• Familiarity with containerised microservices architectures including Kubernetes.
• Ability to work under general direction, independently determine approaches to solutions, and proactively raise issues.

You May Also Have:

• Experience contributing to open source communities (GitHub commits, CVE submissions, blogs).
• Experience with containerization and orchestration (Kubernetes) in a cloud environment.