Close

Security Engineer

• Build a recurring product security review program across backend, frontend, APIs, and customer-facing integrations
• Threat-model new features, audit high-risk areas, review code, and build safe proof-of-concepts in isolated development environments
• Improve application security testing using static analysis, dependency and secrets scanning, dynamic testing, and focused automation
• Own vulnerability intake and remediation from HackerOne, scanners, penetration tests, audits, customers, and internal research
• Reproduce issues, assess exploitability and impact, track remediation, and verify fixes
• Serve as technical lead for the bug bounty program
• Automate security-alert ingestion, deduplication, enrichment, prioritization, and routing
• Improve dependency scanning and create safer upgrade and pull-request workflows
• Inventory application secrets, add rotation paths, document runbooks, and automate rotation where appropriate
• Expand Vault-backed dynamic credentials and reduce emergency secret rotations
• Partner with Infrastructure to strengthen AWS security across identity, networking, compute, storage, containers, and registries
• Create secure defaults, just-in-time access patterns, infrastructure guardrails, and actionable remediation
• Support external assessments, audits, SOC 2 goals, documentation, paved roads, and engineering training
• Take a key technical role in security incident response, including investigation, containment, remediation, root-cause analysis, and follow-up improvements
• Report to the Backend Platform team manager within Engineering, Product, and Design while working across the product and infrastructure surface

Explore Senior Product Security Engineer at Close. Review requirements and application details.