Senior Application Security Platform Engineer

Overview

Senior Application Security Platform Engineer responsible for embedding security practices into software development pipelines and partnering with development teams to remediate vulnerabilities.

What you'll do

• Architect and support secure software development lifecycle operations embedded in software development pipelines.
• Provide technical security guidance to developers, team leads, and producers.
• Drive remediation efforts for internally and publicly identified vulnerabilities.

What you'll need

• 5+ years of experience identifying and remediating security bugs/flaws, assisted by automated pipelines.
• Knowledge of common web security vulnerabilities (OWASP Top 10), client-side security landscape, attack techniques, and remediation tactics/strategies.
• Experience implementing and tuning SAST, SCA, IaC, and Secrets Detection tools, including fine-tuning static analysis detections with custom rule engines (CodeQL, Semgrep).
• Experience deploying within CI/CD platforms (TeamCity or GitHub Actions) and container orchestration frameworks (Kubernetes), including establishing appropriate security controls.
• Experience establishing monitoring and observability techniques of build pipelines and their outputs.
• Experience with Windows and Linux operating systems.
• Proficiency in C# and Python.

Details

• Full-time, in-office position based out of Rockstar’s NYC headquarters in Downtown Manhattan.