FREE ACCESS
5,000–10,000 jobs/day
See all jobs on Scoutfield
Search thousands of fresh jobs every day.
Discover
- Fresh listings
- Fast filters
- No subscription required
Create a free account and start exploring right away.
Core Competencies
Role fitCore Competencies
Use this summary to align your resume positioning with the role.
Demonstrates extensive hands-on technical security experience, focusing on security engineering, penetration testing, and vulnerability research. Proficient in building automated security testing tools and integrating vulnerability scanning into CI/CD pipelines while establishing security standards and best practices.
Highest-signal resume keywords
Security EngineeringPenetration TestingVulnerability ResearchManual Code AuditingCloud Security
ATS Keywords
Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills
PythonTypeScriptWeb Penetration TestingThreat ModelingSecurity AssessmentsSASTDASTAutomated Security TestingVulnerability ScanningSecure Architecture Design
Soft Skills
Strong Communication SkillsAbility to Work in Fast-Paced Environment
Tools & Technologies
AWSGCPAzureKubernetesInfrastructure-as-Code
Certifications & Qualifications
OSCPOSEPOSWEGWAPT
Industry Keywords
OWASP Top 10SOC 1SOC 2ISO 27001NIST FrameworksAI Security EvaluationsLLMsAgentic Workflows
Tech Stack
Tools & technologiesAWSAzureCloudGoogle Cloud PlatformJavaScriptKubernetesMicroservicesNode.jsPythonTypeScriptGo
About the role
Key responsibilities & impact- Conduct hands-on security reviews, manual code audits, and static/dynamic analysis on the product codebase
- Perform regular internal penetration testing, threat modeling, and security assessments across web endpoints, cloud APIs, and microservices
- Build automated security testing tools and integrate vulnerability scanning into CI/CD pipelines
- Identify and triage complex vulnerabilities and architectural flaws, and assist engineering teams with remediation
- Set security standards and best practices across R&D and product as the internal security authority
- Perform AI security evaluations of LLMs and agentic workflows for prompt injection, data leakage, and access control bypasses
- Partner with developers to write secure libraries, harden authentication and authorization layers, and conduct incident response
- Manage third-party external penetration tests and vulnerability disclosure programs
- Own security outcomes and drive initiatives from idea to production
- Establish security processes and structure in an evolving startup environment
- Balance deep technical execution with strategic and client conversations
Requirements
What you’ll need- 5+ years of hands-on technical security experience focusing on security engineering, penetration testing, and vulnerability research
- Demonstrated proficiency in manual code auditing using Python and TypeScript
- Web penetration testing methodologies, including OWASP Top 10 and SANS
- Strong command of cloud security across AWS, GCP, and Azure
- Web security and secure architecture design expertise
- Experience with SOC 1, SOC 2, ISO 27001, or NIST frameworks
- Relevant technical security certifications such as OSCP, OSEP, OSWE, GWAPT, or equivalent practical credentials
- Hands-on experience with security reviews, manual code audits, SAST/DAST, penetration testing, threat modeling, and security assessments
- Experience with AI security evaluations, including LLMs, agentic workflows, prompt injection, data leakage, and access control bypasses
- Ability to build automated security testing tools and integrate vulnerability scanning into CI/CD pipelines
- Strong development/coding capability in Python, Node.js/TypeScript, or Go for tooling and exploit proof-of-concept creation
- Familiarity with Kubernetes, infrastructure-as-code, and cloud-native architectures is a bonus
- Experience exploiting or securing LLM-powered systems, agentic systems, or AI infrastructure is a bonus
- Background in legal, financial, or other high-stakes document-heavy domains is a bonus
- Experience building a security function from scratch is a bonus
- Strong communication skills and ability to work in a fast-paced startup environment