threat modeling

Lead Security Engineer

posted by: spj_bot

About LawnStarter

LawnStarter is the nation's leading on-demand marketplace for lawn care and outdoor services, with over $150M in annual bookings. We're expanding beyond lawn care to become the one-stop shop for all home services — operating across three brands (LawnStarter, Lawn Love, Home Gnome) on a single shared platform, with customers and pros on both sides and real money moving every day.

About Security at LawnStarter

Security is already part of how we build — today it's owned by our Cloud & DevOps team, who've kept it solid as we've scaled. As we grow a $150M+ marketplace that processes payments, holds customer and pro data, and runs on AWS — and as AI agents let us ship faster than ever — we're ready to take security to the next level with a dedicated leader.

Job Skills

draw php threat modeling customer data marketplace data flows security engineering manager job description collaborate application security read react lawn care map threat models secure coding plan com rehearsed laravel build control IAM automating triaged safe m vulnerability management kubernetes build automated automated devops gnome technical controls codebase triaging leadership ul managing heavy lifting muscle write abstract runbook traceable blob prioritize sharpens vulnerabilities threat model security engineer operating planning infrastructure security script github design review automate deliberate PCI management mapping leveling safely tooling collaborator risk register processes payments case audit hardening business case security voice datadog layer mapped infrastructure encryption data protection typescript scale security engineers audits
View the job post & apply
Login/Signup

DevSecOps Engineer- Latin America- Remote

posted by: spj_bot

Azumo is looking for a highly technical and hands-on DevSecOps Engineer / Security Solutions Lead to own and strengthen the security posture of our platform, infrastructure, and AI-driven systems.

This is a proactive, operationally-focused role—not just policy work. You will actively secure systems, remediate vulnerabilities, and collaborate across engineering and compliance to ensure continuous resilience. Working in a remote-first, high-trust engineering culture, you will join us as we scale rapidly following our Series A funding to power the future of modern financial infrastructure.

Location: Remote Latin America

In this role, you will secure and improve the systems that power our FinTech ecosystem while also serving as a key representative of our security program during customer and partner due diligence processes.

Key Responsibilities

Security Engineering & System Hardening

● Secure and harden cloud infrastructure, applications, APIs, internal systems, and operational workflows. · Implement and maintain security controls across production environments, CI/CD pipelines, cloud infrastructure, and internal tooling.

● Work directly with engineering teams to remediate vulnerabilities and improve secure development practices.

Job Skills

layers dss professional endpoint security risk assessments threat modeling communication security regulation audit preparation security engineering systems build collaborate application security best practices communication skills banking operations evidence collection root cause analysis integrate coordinate harden decision make scalable mitigation due diligence suspicious activity powered systems secure systems operational security documentation career development open source accountability communicate security vulnerability management anomaly detection automated offensive security financial institution validate human interactions development company technical controls security program incident response leadership reliability automation risk management web systems system health access control cloud security cloud native banks workflows collaboration security requirements machine learn investigate development services innovative software development vulnerabilities logging maternity planning cloud infrastructure self starter resilience infrastructure security data security validation penetration testing PCI distributed systems operational system devsecops safely vulnerability scanning engineer security San cross functional collaboration latin tooling security control remuneration SIEM systems handling long term solving complex problems operationalize philanthropy leadership teams audit control validation hardening infrastructure as code scalability security architecture infrastructure encryption scale architecture controls prioritize production system
View the job post & apply
Login/Signup

Product Security Engineer

posted by: spj_bot

As our platform continues to scale, security becomes a core product capability rather than a separate function. We're looking for a Product Security Engineer who can partner directly with engineering teams to build secure systems from the ground up.

This is a highly technical, hands-on role where you'll improve the security of our applications, cloud infrastructure, APIs, and development lifecycle.

Responsibilities

Application Security

  • Review application architecture and new product features from a security perspective.
  • Identify security vulnerabilities across backend services, APIs, mobile applications, and web platforms.
  • Perform threat modeling and security design reviews.
  • Support internal and external penetration testing activities.

Secure Development

  • Build and improve Secure SDLC across engineering teams.
  • Integrate security tooling into CI/CD pipelines.
  • Improve developer security practices and provide technical guidance.
  • Help engineering teams remediate vulnerabilities.

Cloud & Infrastructure Security

  • Improve the security posture of our cloud infrastructure.
  • Secure Kubernetes environments, IAM policies, secrets management, and infrastructure components.
  • Implement security monitoring and hardening best practices.
  • Work closely with Platform and DevOps teams.

Security Automation

Job Skills

View the job post & apply
Login/Signup

Principal Security Engineer

posted by: spj_bot

Location: Remote - US or EU

Remote | Full-time

Compensation: $160K - $240K

Our client operates a core banking platform designed specifically for digital assets, enabling fintechs and systemically important financial institutions to build, operate, and scale onchain infrastructure. The platform secures over €100B in assets and powers critical operations—including key management, transaction processing, treasury, and compliance—for over 400 global institutions.

Our client is seeking a Principal Security Engineer to lead product security across the entire ecosystem. In this role, security is built directly into the system's architecture rather than applied as a secondary control. The ideal candidate will take ownership of hardening key management, signing workflows, authentication systems, policy enforcement, and multi-chain integrations.

Beyond core product security and vulnerability management, this position plays a pivotal role in shaping the long-term architectural vision of a platform trusted by tier-one financial institutions. As an organization committed to technical excellence, our client also encourages contribution to the broader security community through research, publications, and industry events.

Key Responsibilities

Job Skills

layers professional key management secure patterns threat modeling communication policy enforcement cryptographic protocol security engineering work environment banking operations supply chain professional development supply chain security architectural design problem solving management system authorization root cause analysis security community security security policy threat models security sensitive research mitigation nist cybersecurity framework problem solve computing platform communicate developer environments vulnerability management cloud computing financial institution stage track incident response leadership operates new product designed specifically environment security authentication protocol treasury networking protocols distributed networking protocols managing security distributed networks managed securely digital asset workflows layered blockchain investigate initial screening think leadership external representation chain integrations security engineer infrastructure security critical thinking operate version control security research distributed systems defense in depth transaction processing backend security control enforce rust platform trusted long term presentations workflows systems development budget external auditor audit hardening infrastructure as code security architecture infrastructure embedded scale typescript applicable data audits core product
View the job post & apply
Login/Signup

Product Security Engineer

posted by: spj_bot

Location: Remote - Remote APAC & EU

Remote | Full-time

Compensation: $75K - $85K

Our client is a fast-growing, enterprise-grade software organization committed to supporting, developing, and servicing a leading open-source, proof-of-stake distributed ledger platform. As an EVM-compatible network built to meet the rigorous demands of global developers and institutions, the platform prioritizes speed, security, stability, and sustainability, and is governed by industry-leading organizations across multiple sectors and regions.

As the platform scales with new protocol upgrades, EVM-compatible services, cross-chain infrastructure, and cryptographic primitives, managing the expanding attack surface is paramount. The Product Security Engineer will be responsible for embedding security directly into the product development lifecycle, ensuring that security remains a first-class property of every protocol upgrade, smart contract, and node shipped to production. This role focuses on hands-on vulnerability discovery, adversarial testing, and proactive threat mitigation before code reaches production.

Key Responsibilities

Job Skills

map supporting developing analysis dynamic analysis nodes large scale systems professional auditing automation polynomial embedding security policy managing product lifecycle research secure coding mitigation code review threat modeling triage solving complex distributed systems design protocol static analysis building custom sustainability security test prioritizes translate tooling experience design enforce manager security testing rust open source security assessments integrating attack pattern managed securely constructions workflows blockchain coding innovation automated audit compatible governed ethereum developing custom read security architecture node bridges attack surface layer vulnerabilities exploitation collaborative infrastructure grammar scale json rpc applicable data security engineer vulnerability discovery codebase e java operating remote remote track
View the job post & apply
Login/Signup

Senior Blockchain Security Engineer

posted by: spj_bot

Senior Blockchain Security Engineer
Employment: Full-time via MLabs
 Engagement: Contracted to a UAE-based enterprise blockchain / fintech client
 Location: Remote (Eastern Europe / MENA / India preferred)

Job Description
MLabs is hiring a Senior Blockchain Security Engineer to support a large-scale blockchain and financial technology program for a UAE-based enterprise client.
You will be responsible for securing smart contracts, blockchain integrations, and protocol-level components within a custom enterprise blockchain ecosystem. This role requires deep expertise in smart contract vulnerabilities, secure architecture design, and threat modeling in decentralized systems.
The ideal candidate has hands-on experience auditing smart contracts and identifying vulnerabilities in production blockchain environments.

Responsibilities

Job Skills

View the job post & apply
Login/Signup

Director of Cybersecurity

posted by: spj_bot

About us:

Soar is a global fintech startup that specializes in financing and investment. Currently headquartered in Saudi Arabia, Soar is growing throughout the region with a mission to help people achieve their financial goals with innovative financial and property investment solutions and tools through its multi-purpose platform, designed to offer a simple and seamless user experience.

Role Summary:

You will be the architect of our "Security by Design" philosophy. Your primary mandate is to embed security into every stage of our software development lifecycle—from the first line of code to production deployment. You will leverage AI-driven tools to automate threat detection and vulnerability management, ensuring that our speed of innovation is matched by our speed of defense.

Key Responsibilities:

1. Secure Software Development Life Cycle (SSDLC)

Job Skills

layers software analysis high availability threat modeling powered tools container security gitlab nice python integrating certify information system security professional application security docker operations docker container information system security threat detection evidence collection data storage application firewall investment e cybersecurity framework manage information system secure coding cybersecurity self host governance risk multi purpose vulnerability management kubernetes scripts automated offensive security sonarqube scripting network monitoring stage user experience writing composition analysis security security predictive automation checkmarx integration jenkins traffic analysis phase software development life cycle offensive security certify professional innovation innovative software development secure software network security linux servers automation integration github code review automate management devsecops ddos vulnerability scanning financing enforce web application security testing burp suite tools e coding hardening sans infrastructure IPS data protection certify secure software lifecycle professional tools audits
View the job post & apply
Login/Signup

Senior DevSecOps Engineer

posted by: spj_bot

We are looking for a Senior DevSecOps who will help make our cloud infrastructure safe, stable, and automated. You will work together with the development, platform, and security teams to add security at every step of product creation.

This is a great chance to grow in security automation, improve processes, and bring modern DevSecOps practices into the company.

Requirements


Must-Have Skill

Job Skills

network security foreign language incident response resilience aws security specialty terraform auditing learning support automation cloud engineering cloudtrail cross functional risk assessments CSF research github VPC mental health threat modeling container security milestones management image network policies devsecops IAM vulnerability scanning guardduty SAML TLS DNS safe SIEM nice automation processes python security policies RBAC collaborate improve processes best practices api gateway SSO collaboration communication skills kubernetes benchmarks kms automated continuous monitoring professional development learning mfa adoption scripting manage infrastructure infrastructure as code devops vulnerabilities threat detection collaborative logging encryption integrated bash budget prioritize network segmentation cloud infrastructure integrations cloudflare
View the job post & apply
Login/Signup

Principal Security Engineer

posted by: spj_bot

Principal Security Engineer - Blockchain Wallet Infrastructure

Location: Remote - Location: US or EU (remote-first, office optional). Must be in the US, not Canada or in the European Union. France or Paris or as close as possible, always preferred

Compensation: $220K - $300K

Join a stellar team of leaders and experts in blockchain technology, cryptography, and infrastructure to build the backbone of blockchain wallet infrastructure for the next financial era. We are hiring a Principal Security Engineer to lead security design and development across our entire platform. Reporting directly to the CISO, you will set the strategy to protect our high-stakes financial systems, fix vulnerabilities, and keep client wallets safe.

This is a strategic and highly technical role spanning the full security lifecycle. You will make security part of every layer of the stack, from architecture design to incident response. Beyond defense, you will champion secure development practices, mentor engineers, and represent the company's security posture to clients and the wider community.

Responsibilities:

Job Skills

incident response security design leadership mentorship security strategy equity security security policy systems languages secure coding risks manage threat modeling threat management penetration testing cloud security communication defense in depth web protocols architecture design reviews design security control security engineering safe security testing rust integrating european union stock options design architecture application security reliable industry standards best practices managed securely blockchain vulnerability management supply chain automated systems knowledge office space security architecture software development layer secure software standards iso cryptography infrastructure typescript applicable data security engineer coordinate enforcement secure networking stakes financial system audits
View the job post & apply
Login/Signup

Staff, Application Security Engineer (Remote - Canada)

posted by: spj_bot

About Jobgether:

Jobgether is a Talent Matching Platform that partners with companies worldwide to efficiently connect top talent with the right opportunities through AI-driven job matching.

One of our companies is currently looking for a Staff, Application Security Engineer in Canada.

This is an exciting opportunity for a senior-level Application Security Engineer to play a critical role in enhancing security across high-scale, cloud-native applications. In this role, you will drive secure development practices, implement automated security solutions within CI/CD pipelines, and collaborate with cross-functional teams to ensure resilient and secure software delivery. You’ll be a key player in shaping security strategy, leading initiatives to reduce vulnerabilities, and staying ahead of emerging threats. This is a remote-first role open to candidates based in Alberta, Ontario, or British Columbia.

Accountabilities:

Job Skills

View the job post & apply
Login/Signup
Subscribe to threat modeling

SPJ is not just a platform; it's a transformative force in the maritime sector. We reinvent job discovery and collaboration, leveraging cutting-edge AI to create a space where careers thrive and innovations set sail.

Featured Posts

Contact