Jobs → Engineering → Software Security Engineer

About the Role We are seeking a Software Security Engineer to join our Search Engineering team. This role involves managing vulnerability lifecycles, ensuring secure architectural practices, and overseeing automated fix validations. Key Responsibilities • Perform threat modeling and asset profiling by documenting trust boundaries, data flows, and architectural entry points for high-priority services • Maintain up-to-date threat profiles in centralized repositories • Conduct vulnerability triage and policy management by reviewing scanner findings, classifying severity, and evaluating exception requests against security policies • Construct minimal test environments/harnesses to validate reported findings and confirm viable vulnerabilities vs. false positives • Supervise and validate code patches generated by automated remediation agents, executing tests and inspecting diffs for regressions • Route validated patches to code owners and shepherd fixes through code review to production deployment Requirements • 12-15 years of experience in Application Security Engineer (Heavy Programming / Vulnerability Management) or Software Security Engineer • Understanding of architectural trust boundaries, attack surfaces, data flows, and threat modeling frameworks (e.g., STRIDE, PASTA) • Working knowledge of common vulnerability classifications (CWE, CVE, OWASP Top 10) and SLA mapping • Proficiency reading and writing code in at least two core languages (C++, Go, Java, Python) and building test harnesses/PoCs • Strong code review skills (identifying regressions, hallucinations) and knowledge of secure coding standards